From 86f5d455e58ba30aa8645b8be704552e6026bce8 Mon Sep 17 00:00:00 2001
From: Ciprian Hacman <ciprian@hakman.dev>
Date: Sun, 12 May 2024 09:40:27 +0300
Subject: [PATCH] Release 1.30.0-alpha.1 (#16563)

* Release 1.30.0-alpha.1

* Update tests for K8s v1.30

* Remove mentions of K8s v1.24
---
 Makefile                                      |     8 +-
 cmd/kops/create_cluster_integration_test.go   |     2 +-
 cmd/kops/integration_test.go                  |    64 +-
 hack/generate-asset-hashes.sh                 |     6 +-
 kops-version.go                               |     4 +-
 pkg/apis/kops/validation/validation_test.go   |    11 -
 pkg/assets/assetdata/k8s-1.24.yaml            |  1752 ---
 pkg/kubeconfig/create_kubecfg_test.go         |     2 +-
 .../components/awscloudcontrollermanager.go   |     2 -
 pkg/model/components/clusterautoscaler.go     |     2 -
 pkg/model/components/containerd.go            |     4 +-
 pkg/model/components/etcdmanager/model.go     |     2 +-
 .../etcdmanager/tests/interval/tasks.yaml     |    12 +-
 .../etcdmanager/tests/minimal/tasks.yaml      |    12 +-
 .../tests/overwrite_settings/tasks.yaml       |    12 +-
 .../etcdmanager/tests/proxy/tasks.yaml        |    12 +-
 pkg/model/components/kubeapiserver/model.go   |     2 +-
 .../kubeapiserver/tests/minimal/tasks.yaml    |     2 +-
 pkg/model/openstackmodel/servergroup_test.go  |    32 +-
 pkg/nodelabels/builder_test.go                |     4 +-
 .../wellknownassets/kopsassets_test.go        |     8 +-
 .../different-amis/expected-v1alpha2.yaml     |    13 +-
 .../different-amis/options.yaml               |     2 +-
 .../expected-v1alpha2.yaml                    |    11 +-
 .../options.yaml                              |     2 +-
 ...jects.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...rdata.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ustom.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ander.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...t-1a.masters.complex.example.com_user_data |     2 +-
 ...mplate_nodes.complex.example.com_user_data |     2 +-
 ...s_s3_object_cluster-completed.spec_content |    22 +-
 ...-controller.addons.k8s.io-k8s-1.18_content |     3 +-
 ...mplex.example.com-addons-bootstrap_content |    13 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...ration.rbac.addons.k8s.io-k8s-1.23_content |    52 -
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ect_nodeupconfig-master-us-test-1a_content |    42 +-
 .../aws_s3_object_nodeupconfig-nodes_content  |    31 +-
 .../complex/in-legacy-v1alpha2.yaml           |     2 +-
 .../update_cluster/complex/in-v1alpha2.yaml   |     2 +-
 .../update_cluster/complex/kubernetes.tf      |    10 +-
 ...press.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...inerd.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...inerd.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...t_123.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...g-iam.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...cdmanager-events-master-us-test-1b_content |     6 +-
 ...cdmanager-events-master-us-test-1c_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1b_content |     6 +-
 ...etcdmanager-main-master-us-test-1c_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ingsg.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...cdmanager-events-master-us-test-1b_content |     6 +-
 ...cdmanager-events-master-us-test-1c_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1b_content |     6 +-
 ...etcdmanager-main-master-us-test-1c_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     2 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     2 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...nallb.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...icies.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ct_ha.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...cdmanager-events-master-us-test-1b_content |     6 +-
 ...cdmanager-events-master-us-test-1c_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1b_content |     6 +-
 ...etcdmanager-main-master-us-test-1c_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...a-gce.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...cdmanager-events-master-us-test1-b_content |     6 +-
 ...cdmanager-events-master-us-test1-c_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-b_content |     6 +-
 ...etcdmanager-main-master-us-test1-c_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 .../many-addons-ccm-irsa24/README.md          |     9 -
 ....kube-system.sa.minimal.example.com_policy |    17 -
 ....kube-system.sa.minimal.example.com_policy |    17 -
 ....kube-system.sa.minimal.example.com_policy |    17 -
 ....kube-system.sa.minimal.example.com_policy |    17 -
 ....kube-system.sa.minimal.example.com_policy |    17 -
 ....kube-system.sa.minimal.example.com_policy |    17 -
 ....kube-system.sa.minimal.example.com_policy |   116 -
 ....kube-system.sa.minimal.example.com_policy |   118 -
 ....kube-system.sa.minimal.example.com_policy |    26 -
 ....kube-system.sa.minimal.example.com_policy |    30 -
 ....kube-system.sa.minimal.example.com_policy |    35 -
 ....kube-system.sa.minimal.example.com_policy |    91 -
 ..._policy_masters.minimal.example.com_policy |   137 -
 ...le_policy_nodes.minimal.example.com_policy |    48 -
 ...t-1a.masters.minimal.example.com_user_data |   138 -
 ...mplate_nodes.minimal.example.com_user_data |   161 -
 ...s_s3_object_cluster-completed.spec_content |   246 -
 .../data/aws_s3_object_discovery.json_content |    18 -
 .../data/aws_s3_object_keys.json_content      |    20 -
 ...cdmanager-events-master-us-test-1a_content |   136 -
 ...etcdmanager-main-master-us-test-1a_content |   136 -
 ...-controller.addons.k8s.io-k8s-1.18_content |   254 -
 ...-csi-driver.addons.k8s.io-k8s-1.17_content |  1169 --
 ...-controller.addons.k8s.io-k8s-1.19_content |  1264 --
 ...nimal.example.com-addons-bootstrap_content |   215 -
 ...com-addons-certmanager.io-k8s-1.16_content | 10095 ----------------
 ...-autoscaler.addons.k8s.io-k8s-1.15_content |   398 -
 ...-controller.addons.k8s.io-k8s-1.12_content |   155 -
 ...-controller.addons.k8s.io-k8s-1.16_content |   225 -
 ...ration.rbac.addons.k8s.io-k8s-1.23_content |    52 -
 ...rics-server.addons.k8s.io-k8s-1.11_content |   276 -
 ...ing.amazon-vpc-routed-eni-k8s-1.16_content |   638 -
 ...e-termination-handler.aws-k8s-1.11_content |   283 -
 ...-controller.addons.k8s.io-k8s-1.20_content |  1372 ---
 ...ect_nodeupconfig-master-us-test-1a_content |   336 -
 .../aws_s3_object_nodeupconfig-nodes_content  |    64 -
 .../many-addons-ccm-irsa24/in-v1alpha2.yaml   |    95 -
 .../many-addons-ccm-irsa24/kubernetes.tf      |  1213 --
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ddons.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...mal.example.com-ASGLifecycle_event_pattern |     1 -
 ....com-InstanceScheduledChange_event_pattern |     1 -
 ...mple.com-InstanceStateChange_event_pattern |     1 -
 ...example.com-SpotInterruption_event_pattern |     1 -
 ...am_role_masters.minimal.example.com_policy |    10 -
 ..._iam_role_nodes.minimal.example.com_policy |    10 -
 ...4a6ed9aa889b9e2c39cd663eb9c7157_public_key |     1 -
 ...s3_object_etcd-cluster-spec-events_content |     4 -
 ...s_s3_object_etcd-cluster-spec-main_content |     4 -
 .../aws_s3_object_kops-version.txt_content    |     1 -
 ...-static-kube-apiserver-healthcheck_content |    33 -
 ...ons-coredns.addons.k8s.io-k8s-1.12_content |   383 -
 ...let-api.rbac.addons.k8s.io-k8s-1.9_content |    17 -
 ...ration.rbac.addons.k8s.io-k8s-1.23_content |    52 -
 ...m-addons-limit-range.addons.k8s.io_content |    15 -
 ...-storage-aws.addons.k8s.io-v1.15.0_content |   118 -
 .../aws_s3_object_nodeupconfig-nodes_content  |    64 -
 ...s_sqs_queue_minimal-example-com-nth_policy |    16 -
 .../update_cluster/minimal-1.24/id_rsa.pub    |     1 -
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...mal.example.com-ASGLifecycle_event_pattern |     0
 ....com-InstanceScheduledChange_event_pattern |     0
 ...mple.com-InstanceStateChange_event_pattern |     0
 ...example.com-SpotInterruption_event_pattern |     0
 ...am_role_masters.minimal.example.com_policy |     0
 ..._iam_role_nodes.minimal.example.com_policy |     0
 ..._policy_masters.minimal.example.com_policy |     0
 ...le_policy_nodes.minimal.example.com_policy |     0
 ...4a6ed9aa889b9e2c39cd663eb9c7157_public_key |     0
 ...t-1a.masters.minimal.example.com_user_data |     2 +-
 ...mplate_nodes.minimal.example.com_user_data |     2 +-
 ...s_s3_object_cluster-completed.spec_content |    22 +-
 ...s3_object_etcd-cluster-spec-events_content |     0
 ...s_s3_object_etcd-cluster-spec-main_content |     0
 .../aws_s3_object_kops-version.txt_content    |     0
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-controller.addons.k8s.io-k8s-1.18_content |     3 +-
 ...-csi-driver.addons.k8s.io-k8s-1.17_content |     0
 ...nimal.example.com-addons-bootstrap_content |    13 +-
 ...ons-coredns.addons.k8s.io-k8s-1.12_content |     0
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...let-api.rbac.addons.k8s.io-k8s-1.9_content |     0
 ...m-addons-limit-range.addons.k8s.io_content |     0
 ...e-termination-handler.aws-k8s-1.11_content |     0
 ...-storage-aws.addons.k8s.io-v1.15.0_content |     0
 ...ect_nodeupconfig-master-us-test-1a_content |    42 +-
 .../aws_s3_object_nodeupconfig-nodes_content  |    65 +
 ...s_sqs_queue_minimal-example-com-nth_policy |     0
 .../id_rsa.pub                                |     0
 .../in-v1alpha2.yaml                          |     2 +-
 .../kubernetes.tf                             |     8 -
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...l-aws.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     2 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-etcd.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-ipv6.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-ipv6.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-ipv6.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-ipv6.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...mpool.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...l-gce.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...l-gce.example.com-addons-bootstrap_content |     2 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...e-ilb.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-name.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-name.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...e-plb.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test1-a_content |     6 +-
 ...etcdmanager-main-master-us-test1-a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ivate.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...minimal.k8s.local-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...minimal.k8s.local-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...sts-etcdmanager-events-master-fsn1_content |     6 +-
 ...fests-etcdmanager-main-master-fsn1_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     2 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...ager-events-control-plane-fr-par-1_content |     6 +-
 ...anager-main-control-plane-fr-par-1_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...minimal.k8s.local-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...cdmanager-events-master-us-test-1b_content |     6 +-
 ...cdmanager-events-master-us-test-1c_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1b_content |     6 +-
 ...etcdmanager-main-master-us-test-1c_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ances.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...cdmanager-events-master-us-test-1b_content |     6 +-
 ...cdmanager-events-master-us-test-1c_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1b_content |     6 +-
 ...etcdmanager-main-master-us-test-1c_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ances.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...rname.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...rname.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ed-ip.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ubnet.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...alico.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...canal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ilium.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ilium.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...asters.privatecilium.example.com_user_data |     2 +-
 ..._nodes.privatecilium.example.com_user_data |     2 +-
 ...s_s3_object_cluster-completed.spec_content |    22 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ect_nodeupconfig-master-us-test-1a_content |    42 +-
 .../aws_s3_object_nodeupconfig-nodes_content  |    31 +-
 ...-controller.addons.k8s.io-k8s-1.18_content |     3 +-
 ...ilium.example.com-addons-bootstrap_content |    13 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...ration.rbac.addons.k8s.io-k8s-1.23_content |    52 -
 .../privatecilium2/in-v1alpha2.yaml           |     2 +-
 .../privatecilium2/kubernetes.tf              |    14 +-
 ...cdmanager-cilium-master-us-test-1a_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...anced.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...edns1.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...edns2.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...annel.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...opeio.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...t-1a.masters.minimal.example.com_user_data |     2 +-
 ...mplate_nodes.minimal.example.com_user_data |     2 +-
 ...s_s3_object_cluster-completed.spec_content |    22 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-controller.addons.k8s.io-k8s-1.18_content |     3 +-
 ...nimal.example.com-addons-bootstrap_content |    13 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...ration.rbac.addons.k8s.io-k8s-1.23_content |    52 -
 ...ect_nodeupconfig-master-us-test-1a_content |    42 +-
 .../aws_s3_object_nodeupconfig-nodes_content  |    31 +-
 .../public-jwks-apiserver/in-v1alpha2.yaml    |     2 +-
 .../public-jwks-apiserver/kubernetes.tf       |    12 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...ubnet.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...edvpc.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...-ipv6.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...naged.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 ...cdmanager-events-master-us-test-1a_content |     6 +-
 ...etcdmanager-main-master-us-test-1a_content |     6 +-
 ...-static-kube-apiserver-healthcheck_content |     2 +-
 ...nimal.example.com-addons-bootstrap_content |     4 +-
 ...-controller.addons.k8s.io-k8s-1.12_content |     6 +-
 ...-controller.addons.k8s.io-k8s-1.16_content |     6 +-
 upup/pkg/fi/cloudup/apply_cluster.go          |     4 +-
 upup/pkg/fi/cloudup/template_functions.go     |     8 +-
 .../amazonvpc-containerd/manifest.yaml        |     4 +-
 .../amazonvpc/manifest.yaml                   |     4 +-
 .../awscloudcontroller/manifest.yaml          |     4 +-
 .../awsiamauthenticator/crd/manifest.yaml     |     4 +-
 .../mappings/manifest.yaml                    |     4 +-
 ...ops-controller.addons.k8s.io-k8s-1.16.yaml |     6 +-
 .../cilium/manifest.yaml                      |     4 +-
 .../coredns/manifest.yaml                     |     4 +-
 .../insecure-1.19/manifest.yaml               |     4 +-
 .../metrics-server/secure-1.19/manifest.yaml  |     4 +-
 ...dns-controller.addons.k8s.io-k8s-1.12.yaml |     6 +-
 ...ops-controller.addons.k8s.io-k8s-1.16.yaml |     6 +-
 .../service-account-iam/manifest.yaml         |     4 +-
 ...ops-controller.addons.k8s.io-k8s-1.16.yaml |     6 +-
 .../simple/manifest.yaml                      |     4 +-
 638 files changed, 1589 insertions(+), 23986 deletions(-)
 delete mode 100644 pkg/assets/assetdata/k8s-1.24.yaml
 rename tests/integration/create_cluster/{minimal-1.24 => minimal-1.30}/expected-v1alpha2.yaml (84%)
 rename tests/integration/create_cluster/{minimal-1.24 => minimal-1.30}/options.yaml (76%)
 delete mode 100644 tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/README.md
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_cluster-autoscaler.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_dns-controller.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_cluster-autoscaler.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_dns-controller.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_masters.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_nodes.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_nodes.minimal.example.com_user_data
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_cluster-completed.spec_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_discovery.json_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_keys.json_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-load-balancer-controller.addons.k8s.io-k8s-1.19_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-cluster-autoscaler.addons.k8s.io-k8s-1.15_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-metrics-server.addons.k8s.io-k8s-1.11_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-networking.amazon-vpc-routed-eni-k8s-1.16_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-snapshot-controller.addons.k8s.io-k8s-1.20_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-nodes_content
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/in-v1alpha2.yaml
 delete mode 100644 tests/integration/update_cluster/many-addons-ccm-irsa24/kubernetes.tf
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_masters.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_nodes.minimal.example.com_policy
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-events_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-main_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_kops-version.txt_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_nodeupconfig-nodes_content
 delete mode 100644 tests/integration/update_cluster/minimal-1.24/data/aws_sqs_queue_minimal-example-com-nth_policy
 delete mode 100755 tests/integration/update_cluster/minimal-1.24/id_rsa.pub
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_iam_role_masters.minimal.example.com_policy (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_iam_role_nodes.minimal.example.com_policy (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_iam_role_policy_masters.minimal.example.com_policy (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_iam_role_policy_nodes.minimal.example.com_policy (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data (98%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_launch_template_nodes.minimal.example.com_user_data (98%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_cluster-completed.spec_content (92%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_etcd-cluster-spec-events_content (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_etcd-cluster-spec-main_content (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_kops-version.txt_content (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content (95%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content (95%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content (90%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content (98%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-bootstrap_content (89%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content (96%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content (97%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/data/aws_s3_object_nodeupconfig-master-us-test-1a_content (86%)
 create mode 100644 tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_nodeupconfig-nodes_content
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/data/aws_sqs_queue_minimal-example-com-nth_policy (100%)
 rename tests/integration/update_cluster/{many-addons-ccm-irsa24 => minimal-1.30}/id_rsa.pub (100%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/in-v1alpha2.yaml (98%)
 rename tests/integration/update_cluster/{minimal-1.24 => minimal-1.30}/kubernetes.tf (98%)
 delete mode 100644 tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
 delete mode 100644 tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content

diff --git a/Makefile b/Makefile
index 5d269609bedfd..87a40881c65a0 100644
--- a/Makefile
+++ b/Makefile
@@ -66,16 +66,16 @@ GITSHA := $(shell cd ${KOPS_ROOT}; git describe --always)
 # We lock the versions of our controllers also
 # We need to keep in sync with:
 #   pkg/model/components/etcdmanager/model.go
-KOPS_UTILS_CP_TAG=1.29.0-beta.1
+KOPS_UTILS_CP_TAG=1.30.0-alpha.1
 KOPS_UTILS_CP_PUSH_TAG=$(shell tools/get_workspace_status.sh | grep STABLE_KOPS_UTILS_CP_TAG | awk '{print $$2}')
 #   upup/models/cloudup/resources/addons/dns-controller/
-DNS_CONTROLLER_TAG=1.29.0-beta.1
+DNS_CONTROLLER_TAG=1.30.0-alpha.1
 DNS_CONTROLLER_PUSH_TAG=$(shell tools/get_workspace_status.sh | grep STABLE_DNS_CONTROLLER_TAG | awk '{print $$2}')
 #   upup/models/cloudup/resources/addons/kops-controller.addons.k8s.io/
-KOPS_CONTROLLER_TAG=1.29.0-beta.1
+KOPS_CONTROLLER_TAG=1.30.0-alpha.1
 KOPS_CONTROLLER_PUSH_TAG=$(shell tools/get_workspace_status.sh | grep STABLE_KOPS_CONTROLLER_TAG | awk '{print $$2}')
 #   pkg/model/components/kubeapiserver/model.go
-KUBE_APISERVER_HEALTHCHECK_TAG=1.29.0-beta.1
+KUBE_APISERVER_HEALTHCHECK_TAG=1.30.0-alpha.1
 KUBE_APISERVER_HEALTHCHECK_PUSH_TAG=$(shell tools/get_workspace_status.sh | grep STABLE_KUBE_APISERVER_HEALTHCHECK_TAG | awk '{print $$2}')
 
 CGO_ENABLED=0
diff --git a/cmd/kops/create_cluster_integration_test.go b/cmd/kops/create_cluster_integration_test.go
index 0dcdfba825dd5..9b1a32a9502a6 100644
--- a/cmd/kops/create_cluster_integration_test.go
+++ b/cmd/kops/create_cluster_integration_test.go
@@ -46,12 +46,12 @@ var MagicTimestamp = metav1.Time{Time: time.Date(2017, 1, 1, 0, 0, 0, 0, time.UT
 
 // TestCreateClusterMinimal runs kops create cluster minimal.example.com --zones us-test-1a
 func TestCreateClusterMinimal(t *testing.T) {
-	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.24", "v1alpha2")
 	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.25", "v1alpha2")
 	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.26", "v1alpha2")
 	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.27", "v1alpha2")
 	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.28", "v1alpha2")
 	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.29", "v1alpha2")
+	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.30", "v1alpha2")
 	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.26-arm64", "v1alpha2")
 	runCreateClusterIntegrationTest(t, "../../tests/integration/create_cluster/minimal-1.26-irsa", "v1alpha2")
 }
diff --git a/cmd/kops/integration_test.go b/cmd/kops/integration_test.go
index bac43ff549389..80533f55746f6 100644
--- a/cmd/kops/integration_test.go
+++ b/cmd/kops/integration_test.go
@@ -193,6 +193,15 @@ func (i integrationTest) withDefaultAddons24() *integrationTest {
 	)
 }
 
+// withDefaultAddons24 adds the default addons for an AWS cluster running k8s 1.30
+func (i integrationTest) withDefaultAddons30() *integrationTest {
+	return i.withAddons(
+		awsCCMAddon,
+		awsEBSCSIAddon,
+		dnsControllerAddon,
+	)
+}
+
 func (i integrationTest) withDefaults24() *integrationTest {
 	return i.withDefaultAddons24().withDefaultServiceAccountRoles24()
 }
@@ -232,18 +241,6 @@ func TestMinimalAWS(t *testing.T) {
 		runTestTerraformAWS(t)
 }
 
-// TestMinimal runs the test on a minimum configuration
-func TestMinimal_v1_24(t *testing.T) {
-	newIntegrationTest("minimal.example.com", "minimal-1.24").
-		withAddons(
-			awsEBSCSIAddon,
-			dnsControllerAddon,
-			awsCCMAddon,
-			leaderElectionAddon,
-		).
-		runTestTerraformAWS(t)
-}
-
 // TestMinimal runs the test on a minimum configuration
 func TestMinimal_v1_25(t *testing.T) {
 	newIntegrationTest("minimal.example.com", "minimal-1.25").
@@ -308,6 +305,19 @@ func TestMinimal_v1_29(t *testing.T) {
 		runTestTerraformAWS(t)
 }
 
+// TestMinimal runs the test on a minimum configuration
+func TestMinimal_v1_30(t *testing.T) {
+	t.Setenv("KOPS_RUN_TOO_NEW_VERSION", "1")
+
+	newIntegrationTest("minimal.example.com", "minimal-1.30").
+		withAddons(
+			awsEBSCSIAddon,
+			dnsControllerAddon,
+			awsCCMAddon,
+		).
+		runTestTerraformAWS(t)
+}
+
 // TestMinimal_NoneDNS runs the test on a minimum configuration with --dns=none
 func TestMinimal_NoneDNS(t *testing.T) {
 	t.Setenv("KOPS_RUN_TOO_NEW_VERSION", "1")
@@ -482,7 +492,6 @@ func TestComplex(t *testing.T) {
 			awsEBSCSIAddon,
 			dnsControllerAddon,
 			awsCCMAddon,
-			leaderElectionAddon,
 			awsAuthenticatorAddon,
 		).
 		runTestTerraformAWS(t)
@@ -491,7 +500,6 @@ func TestComplex(t *testing.T) {
 			awsEBSCSIAddon,
 			dnsControllerAddon,
 			awsCCMAddon,
-			leaderElectionAddon,
 			awsAuthenticatorAddon,
 		).
 		runTestTerraformAWS(t)
@@ -650,7 +658,7 @@ func TestPrivateCilium(t *testing.T) {
 func TestPrivateCilium2(t *testing.T) {
 	newIntegrationTest("privatecilium.example.com", "privatecilium2").
 		withPrivate().
-		withDefaultAddons24().
+		withDefaultAddons30().
 		withAddons("networking.cilium.io-k8s-1.16").
 		withAddons(certManagerAddon).
 		runTestTerraformAWS(t)
@@ -771,7 +779,7 @@ func TestDiscoveryFeatureGate(t *testing.T) {
 	newIntegrationTest("minimal.example.com", "public-jwks-apiserver").
 		withDefaultServiceAccountRoles24().
 		withServiceAccountRole("aws-node-termination-handler.kube-system", true).
-		withDefaultAddons24().
+		withDefaultAddons30().
 		withOIDCDiscovery().
 		runTestTerraformAWS(t)
 }
@@ -845,30 +853,6 @@ func TestManyAddonsCCMIRSA(t *testing.T) {
 		runTestTerraformAWS(t)
 }
 
-func TestManyAddonsCCMIRSA24(t *testing.T) {
-	newIntegrationTest("minimal.example.com", "many-addons-ccm-irsa24").
-		withOIDCDiscovery().
-		withServiceAccountRole("aws-load-balancer-controller.kube-system", true).
-		withServiceAccountRole("dns-controller.kube-system", true).
-		withServiceAccountRole("aws-cloud-controller-manager.kube-system", true).
-		withServiceAccountRole("cluster-autoscaler.kube-system", true).
-		withServiceAccountRole("ebs-csi-controller-sa.kube-system", true).
-		withServiceAccountRole("aws-node-termination-handler.kube-system", true).
-		withAddons(
-			"aws-load-balancer-controller.addons.k8s.io-k8s-1.19",
-			"aws-ebs-csi-driver.addons.k8s.io-k8s-1.17",
-			"certmanager.io-k8s-1.16",
-			"cluster-autoscaler.addons.k8s.io-k8s-1.15",
-			"networking.amazon-vpc-routed-eni-k8s-1.16",
-			"snapshot-controller.addons.k8s.io-k8s-1.20",
-			"aws-cloud-controller.addons.k8s.io-k8s-1.18",
-			leaderElectionAddon,
-			metricsServerAddon,
-			dnsControllerAddon,
-		).
-		runTestTerraformAWS(t)
-}
-
 func TestManyAddonsCCMIRSA25(t *testing.T) {
 	newIntegrationTest("minimal.example.com", "many-addons-ccm-irsa25").
 		withOIDCDiscovery().
diff --git a/hack/generate-asset-hashes.sh b/hack/generate-asset-hashes.sh
index 7359b0be1bc20..60394a7570bd0 100755
--- a/hack/generate-asset-hashes.sh
+++ b/hack/generate-asset-hashes.sh
@@ -44,11 +44,9 @@ EOF
       --base https://dl.k8s.io/release/ \
       --prefix "v${version}/" \
       --exclude "**/arm/**" \
-      --exclude "**/s390x/**" \
       --exclude "**/ppc64le/**" \
+      --exclude "**/s390x/**" \
       --exclude "**/windows/**" \
-      --exclude "**/*-s390x.tar.gz" \
-      --exclude "**/*-ppc64le.tar.gz" \
       --exclude "**/*.tar.gz" \
       | sed "s@files:@# kubernetes ${version}@g" >> "${REPO_ROOT}/pkg/assets/assetdata/k8s-${prefix}.yaml"
   done
@@ -80,7 +78,6 @@ EOF
   done
 }
 
-generate_k8s_hashes 1.24 17
 generate_k8s_hashes 1.25 16
 generate_k8s_hashes 1.26 15
 generate_k8s_hashes 1.27 13
@@ -88,5 +85,4 @@ generate_k8s_hashes 1.28 9
 generate_k8s_hashes 1.29 4
 generate_k8s_hashes 1.30 0
 
-
 generate_runc_hashes 1.1 12
diff --git a/kops-version.go b/kops-version.go
index 4d344968b47c5..9b197f0b8d8b9 100644
--- a/kops-version.go
+++ b/kops-version.go
@@ -21,8 +21,8 @@ var Version = KOPS_RELEASE_VERSION
 
 // These constants are parsed by build tooling - be careful about changing the formats
 const (
-	KOPS_RELEASE_VERSION = "1.29.0-beta.1"
-	KOPS_CI_VERSION      = "1.29.0-beta.2"
+	KOPS_RELEASE_VERSION = "1.30.0-alpha.1"
+	KOPS_CI_VERSION      = "1.30.0-alpha.2"
 )
 
 // GitVersion should be replaced by the makefile
diff --git a/pkg/apis/kops/validation/validation_test.go b/pkg/apis/kops/validation/validation_test.go
index ce00a0beb740e..35faa27be70d2 100644
--- a/pkg/apis/kops/validation/validation_test.go
+++ b/pkg/apis/kops/validation/validation_test.go
@@ -372,17 +372,6 @@ func TestValidateKubeControllermanager(t *testing.T) {
 			},
 			ExpectedDetail: "experimentalClusterSigningDuration has been replaced with clusterSigningDuration as of kubernetes 1.25",
 		},
-		{
-			Input: kops.KubeControllerManagerConfig{
-				ExperimentalClusterSigningDuration: &metav1.Duration{Duration: time.Hour},
-			},
-			Cluster: &kops.Cluster{
-				Spec: kops.ClusterSpec{
-					KubernetesVersion: "1.24.0",
-				},
-			},
-			ExpectedErrors: []string{},
-		},
 	}
 	for _, g := range grid {
 		if g.Cluster == nil {
diff --git a/pkg/assets/assetdata/k8s-1.24.yaml b/pkg/assets/assetdata/k8s-1.24.yaml
deleted file mode 100644
index 8b1538098a2e0..0000000000000
--- a/pkg/assets/assetdata/k8s-1.24.yaml
+++ /dev/null
@@ -1,1752 +0,0 @@
-# This file is generated by generate-asset-hashes.sh
-
-filestores:
-- base: https://dl.k8s.io/release/
-
-files:
-# kubernetes 1.24.0
-- name: v1.24.0/bin/darwin/amd64/kubectl
-  sha256: a4f011cc45666a8cc7857699e8d3609597f7364ffcf5dff089fc48c1704fd3b0
-- name: v1.24.0/bin/darwin/amd64/kubectl-convert
-  sha256: a112c793c5656e0226d583b0cf9d12707750a4c4862f5f45b1cd59cea1dd1cbb
-- name: v1.24.0/bin/darwin/arm64/kubectl
-  sha256: 46ad59a907f73e438a23e83dbb8da97b33690b7efd55aa65f4f43141e0b18cb9
-- name: v1.24.0/bin/darwin/arm64/kubectl-convert
-  sha256: 265f84a273c1c053ca2704850e57060ce24bf71e9aa67440940530d8d383730a
-- name: v1.24.0/bin/linux/386/kubectl
-  sha256: ab75b445d1ebccf0a0d8c291c4f998f844be0a3c6fd1cfc572cec6cf15280d69
-- name: v1.24.0/bin/linux/386/kubectl-convert
-  sha256: 4a490e9e248db4954f1173a4626a66334805e2860b546a7d2a9c3ccfbcb0f32a
-- name: v1.24.0/bin/linux/amd64/apiextensions-apiserver
-  sha256: e4bbd968e4638d4257d6f25190033223b951c52ee4490270b63bb996bfa5eb2d
-- name: v1.24.0/bin/linux/amd64/kube-aggregator
-  sha256: 1a703682f3fcc9815071c858286d4ceb08b3ad19902ad8a18f5fc8bca0680031
-- name: v1.24.0/bin/linux/amd64/kube-apiserver
-  sha256: 8819c07d68ea37fdc8b38581b874bd8276de28547cc4ed9b7b907b10fc98e067
-- name: v1.24.0/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/amd64/kube-apiserver.tar
-  sha256: 217dfe2ee7d228c46610c42658591d21e73dc5cc32dbbbf4a2de5a9ea51a17f7
-- name: v1.24.0/bin/linux/amd64/kube-controller-manager
-  sha256: 81653c4528eef76aff9a2f258c60a8e96b9a47700086ab968f30fc13d111ace6
-- name: v1.24.0/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 2f74a5fd91f7cb39d5e3409af69d9a269323dadaad852e831c0c8eb053c74bfb
-- name: v1.24.0/bin/linux/amd64/kube-log-runner
-  sha256: e5732080b8c894d4135b2edb16bc3702d54591e12a909aa3c11af28b113a6047
-- name: v1.24.0/bin/linux/amd64/kube-proxy
-  sha256: a036d3ba31a917a573ed231ab9e3cbff38d6c730304d19982a15b4efc8f0101f
-- name: v1.24.0/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/amd64/kube-proxy.tar
-  sha256: 5e9c511d282e95cd69f2e444f58b852321846cf92c96e28bf83f234444f17649
-- name: v1.24.0/bin/linux/amd64/kube-scheduler
-  sha256: 318056b7cb76d75070fdf691a8a32b5daa5597938c64ef05c61cf0379bd6ed9d
-- name: v1.24.0/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/amd64/kube-scheduler.tar
-  sha256: f829ea0d0bc47e31840e0d736be2ab46bb0093684d3e9e3bba9220e1aa0c16b9
-- name: v1.24.0/bin/linux/amd64/kubeadm
-  sha256: 5e58a29eaaf69ea80e90d9780d2a2d5f189fd74f94ec3bec9e3823d472277318
-- name: v1.24.0/bin/linux/amd64/kubectl
-  sha256: 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7
-- name: v1.24.0/bin/linux/amd64/kubectl-convert
-  sha256: 766ed328db7b0370b88bd0eaadacde04b0ce0db978f1defe9edba30532f41ce2
-- name: v1.24.0/bin/linux/amd64/kubelet
-  sha256: 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52
-- name: v1.24.0/bin/linux/amd64/mounter
-  sha256: ee5f28017b90410b454afdaca6206a765688b32c11e05a4337541c1313e2a01c
-- name: v1.24.0/bin/linux/arm64/apiextensions-apiserver
-  sha256: 6959f4d2780b3ce437ea003e65ddced83c98eb41434dbd13c768a61054f1e037
-- name: v1.24.0/bin/linux/arm64/kube-aggregator
-  sha256: c89f43cbc76c7b1fbbb8b2329281447880bd457241464bffe854034c539ada61
-- name: v1.24.0/bin/linux/arm64/kube-apiserver
-  sha256: 3f8bc200470aee9c88ab2aa08d7275a75fdc9b54b32b4f699a336227564d9c7a
-- name: v1.24.0/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/arm64/kube-apiserver.tar
-  sha256: 1743473f605b15388220ed33f21905984beb8864b459ef2212405d6c04c5a0cb
-- name: v1.24.0/bin/linux/arm64/kube-controller-manager
-  sha256: 2dbbdbaca24b12bf5f244624e7f9ad211bb45ed31dcd647db5eb34c16099f72d
-- name: v1.24.0/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 7204ff80e5578248b0254105fc7fa294b7c00f252a593c6de9dd6e46c8208f34
-- name: v1.24.0/bin/linux/arm64/kube-log-runner
-  sha256: d2e8cc8e3b66dcc463e22cc8a6bf83445ebe2294cacac52402991a011c29077d
-- name: v1.24.0/bin/linux/arm64/kube-proxy
-  sha256: 5c02abfb5e648cdf808c9b42d0e34f3a02da0a1c5441ac4d89eb447e553be4de
-- name: v1.24.0/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/arm64/kube-proxy.tar
-  sha256: 19adefdc4ddf99100c52224292ac37a94ffc159691a33c539908ef4796652cfc
-- name: v1.24.0/bin/linux/arm64/kube-scheduler
-  sha256: 18547ffae897ca9901f8a32f7fd387068af19ae60fc6daf4f931da272339e052
-- name: v1.24.0/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 643dd80b1f4272a55f62f377119ac7e5836debf338ba9fea6f6f7981093a8308
-- name: v1.24.0/bin/linux/arm64/kube-scheduler.tar
-  sha256: 9bf3fe733e274d6c23d895f096a8358392d0d99d6563ebf291a49017c7269898
-- name: v1.24.0/bin/linux/arm64/kubeadm
-  sha256: 3e0fa21b8ebce04ca919fdfea7cc756e5f645166b95d6e4b5d9912d7721f9004
-- name: v1.24.0/bin/linux/arm64/kubectl
-  sha256: 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d
-- name: v1.24.0/bin/linux/arm64/kubectl-convert
-  sha256: 7d52e22c56a5a4a25e4efdf8fff5fa87a0e2479c4b0d4e42c7c42fc4f1562930
-- name: v1.24.0/bin/linux/arm64/kubelet
-  sha256: 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e
-- name: v1.24.0/bin/linux/arm64/mounter
-  sha256: 9d462ef684532c4e45f6b3f8e3ac226b33b6387dbc21c00e0263387f54a06b75
-- name: v1.24.0/kubernetes-release.spdx
-  sha256: c0d8e30ad4f13b5f26794264fe057c488c72a5112978b1c24f3940dfaf69368a
-- name: v1.24.0/kubernetes-source.spdx
-  sha256: 1e9a08b906226eb4341f7a71d9de27ee210e6ce68562277f9d318f311392f4fc
-# kubernetes 1.24.1
-- name: v1.24.1/bin/darwin/amd64/kubectl
-  sha256: c160dac7c6889e4661e736cdcabebc8822d8107c1e1386e3ad3da8ee9476bf72
-- name: v1.24.1/bin/darwin/amd64/kubectl-convert
-  sha256: 303db510050faf5f54d2b032b4bd2cf725ae70cbd5488887ee9b041ab2795b1a
-- name: v1.24.1/bin/darwin/arm64/kubectl
-  sha256: 281bdad7b5d46de0aeab6a0c988bf646a350e347c3a2fcab6cf37cb0612ca075
-- name: v1.24.1/bin/darwin/arm64/kubectl-convert
-  sha256: c109d5bbdaaa23b2ba3ae07b103733d7534c2f479da0172aa272f767fedadace
-- name: v1.24.1/bin/linux/386/kubectl
-  sha256: f22629c280309959dacd91334f4874d16f861ece345ee1d1f28c31ffcc3d2147
-- name: v1.24.1/bin/linux/386/kubectl-convert
-  sha256: 13215fcffe700e131e75cd35086bfdb64efbf418b29385bd7ba38bcaf07cdb35
-- name: v1.24.1/bin/linux/amd64/apiextensions-apiserver
-  sha256: 33672ea8e0d7f2afd732bcb22c11bf55953aeca4c87cf4062de3de310e74cb09
-- name: v1.24.1/bin/linux/amd64/kube-aggregator
-  sha256: a2b1719e5af9452727e0d050b4f7d980c4e7c861e5ebb780531aac4c11a7e2e0
-- name: v1.24.1/bin/linux/amd64/kube-apiserver
-  sha256: b1e9eade89e6ad60e3925d73ee73616226149fc8bdf676ed1236e3fdee306852
-- name: v1.24.1/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/amd64/kube-apiserver.tar
-  sha256: 7e4cc8e6512484e2cb42abb9f064c9b4ac2c5f789a2e17259ad2b244890d5a61
-- name: v1.24.1/bin/linux/amd64/kube-controller-manager
-  sha256: c1493d231ab0aaa16a01ac063f558859923c04c665a9bad834b0fdc5d3d466da
-- name: v1.24.1/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/amd64/kube-controller-manager.tar
-  sha256: fda79b1755f7d82dab2a38c73f536133f7bea75214fda77a4d3c77df39b0cf88
-- name: v1.24.1/bin/linux/amd64/kube-log-runner
-  sha256: 9040a870b0bdcb29c5ad3f2d47cbdba1534aef2efdf3e0762430cfa1bab88de4
-- name: v1.24.1/bin/linux/amd64/kube-proxy
-  sha256: 0688df55f7640394e13c6c300f1cf2697756897694b5ae46fbfed94f61e74dc5
-- name: v1.24.1/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/amd64/kube-proxy.tar
-  sha256: 1ab6da9f8ad38ab613fd2d669810b6239a6aef34506f1242a01f9b7c6b15006d
-- name: v1.24.1/bin/linux/amd64/kube-scheduler
-  sha256: fac68ce6413fe392b2527ca3e6569ed5ab5e2c565fbf1fab2347a7b5cca56333
-- name: v1.24.1/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/amd64/kube-scheduler.tar
-  sha256: 8c186b635bcd42d1976f00a6a34abaa2e4e88dc88d99b2cfc6f4b2807b04795b
-- name: v1.24.1/bin/linux/amd64/kubeadm
-  sha256: 15e3193eecbc69330ada3f340c5a47999959bc227c735fa95e4aa79470c085d0
-- name: v1.24.1/bin/linux/amd64/kubectl
-  sha256: 0ec3c2dbafc6dd27fc8ad25fa27fc527b5d7356d1830c0efbb8adcf975d9e84a
-- name: v1.24.1/bin/linux/amd64/kubectl-convert
-  sha256: 8fd13fba6d8bc80a1ef4193a94f096d366d4437e79f2af05a0d5d86e19d645c5
-- name: v1.24.1/bin/linux/amd64/kubelet
-  sha256: fc352d5c983b0ccf47acd8816eb826d781f408d27263dd8f761dfb63e69abfde
-- name: v1.24.1/bin/linux/amd64/mounter
-  sha256: 36302111f0eddcf50545f15e7c440a28151328fdd8cda5bba86d31b531d8a0de
-- name: v1.24.1/bin/linux/arm64/apiextensions-apiserver
-  sha256: 7bc04f58ccdd7df42054f69b4ef9fe0a3901de37536b4aa3aa09906dce29aae2
-- name: v1.24.1/bin/linux/arm64/kube-aggregator
-  sha256: 2d86b329a6a9fd3b65afbdca3e35f25823ee8b39b2479cbae0ce7a4aff417454
-- name: v1.24.1/bin/linux/arm64/kube-apiserver
-  sha256: 1573c6399ce9027cc2d71f29540c543208631995064055b77b5beb08f7f8d5ca
-- name: v1.24.1/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/arm64/kube-apiserver.tar
-  sha256: 5c28f8e4dbfd25b5eb948293bbc9d325720e32c50ac4468180551133d7391c20
-- name: v1.24.1/bin/linux/arm64/kube-controller-manager
-  sha256: 8ec3b1e694aab4b0ed8b785a6ec3c2fb78f62182a2696ca0338734dfa4aefc7f
-- name: v1.24.1/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/arm64/kube-controller-manager.tar
-  sha256: b9f626ba1467db7476c9e8c75dd7b7024e43c56bc249d19583ad172f9adde2e5
-- name: v1.24.1/bin/linux/arm64/kube-log-runner
-  sha256: f09a0afde7c35689706a2fad34663e2d65c3c6d42f0b8ef32d0c98326c225094
-- name: v1.24.1/bin/linux/arm64/kube-proxy
-  sha256: ed8d0cdb336bc6992243fd1fc82784689057f5c2bc70fbcde036e2fdb2ef90b2
-- name: v1.24.1/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/arm64/kube-proxy.tar
-  sha256: 507b5fd0c7243ad2927187fc76286fc3c71605db07f34ea00a71cf7f6b766b6f
-- name: v1.24.1/bin/linux/arm64/kube-scheduler
-  sha256: eb460d7e81512d2757ada5316b05a91815b2fef701cd508cbdf24629b1242a22
-- name: v1.24.1/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: be41b2ddfbcf5e0adb73918f242e0b158eaa5a5868ce51c5f50532f7b4ec150a
-- name: v1.24.1/bin/linux/arm64/kube-scheduler.tar
-  sha256: 9eed293ef365ab086fabac7266190100b597534c77a7706d42078b6a093bb8cb
-- name: v1.24.1/bin/linux/arm64/kubeadm
-  sha256: 04f18fe097351cd16dc91cd3bde979201916686c6f4e1b87bae69ab4479fda04
-- name: v1.24.1/bin/linux/arm64/kubectl
-  sha256: b817b54183e089494f8b925096e9b65af3a356d87f94b73929bf5a6028a06271
-- name: v1.24.1/bin/linux/arm64/kubectl-convert
-  sha256: cc0d1005e44c9548bc5b1a030e0c36d41ef973712fce4b788d82014032996088
-- name: v1.24.1/bin/linux/arm64/kubelet
-  sha256: c2189c6956afda0f6002839f9f14a9b48c89dcc0228701e84856be36a3aac6bf
-- name: v1.24.1/bin/linux/arm64/mounter
-  sha256: b566bd8af0a2c381423848f0f6efcb6764096746d9575530bdcc25f0641a0eae
-- name: v1.24.1/kubernetes-release.spdx
-  sha256: 0b5bf707a1852c5de00e5e8fe50078e8ea94f05d2e9a7bfcfd2e8ff65bd34caa
-- name: v1.24.1/kubernetes-source.spdx
-  sha256: 37d54a69bf47db5f1603d6d4bcfebd79116ba3e929adb8917e5a87d36e7fbe58
-# kubernetes 1.24.2
-- name: v1.24.2/bin/darwin/amd64/kubectl
-  sha256: 50598bf557113300c925e53140f53fc5d0fb8783e8033f73561d873ee6ff2fea
-- name: v1.24.2/bin/darwin/amd64/kubectl-convert
-  sha256: 910b4fd593d558cb7c26f2a77baf049e1e75201960f22d7d703990989b3bca5a
-- name: v1.24.2/bin/darwin/arm64/kubectl
-  sha256: a9c33de9b14e565ec380e3a7034040bf9a0561937c55c859253271ff7e45813c
-- name: v1.24.2/bin/darwin/arm64/kubectl-convert
-  sha256: 3e8091faf5d2b85a6135b839706f192065205d465e5a46a3a1a08bb9c393a4f3
-- name: v1.24.2/bin/linux/386/kubectl
-  sha256: 611c640e5f721fc8f975898275b3cdaaf4084fa4428ca4345d9502b2e1f843cc
-- name: v1.24.2/bin/linux/386/kubectl-convert
-  sha256: 9f5e18f7396becc218361abdfb65731c4acf21eae4e338be72266205d7b03a5a
-- name: v1.24.2/bin/linux/amd64/apiextensions-apiserver
-  sha256: 02d9c6503aa7dedeb72b90a88e93980d3bd8d779997a72051f9ee94551c1abe2
-- name: v1.24.2/bin/linux/amd64/kube-aggregator
-  sha256: f9f7ecaf59c86131e360778a5b1d81f0388bb856a63ab09933f9b7cdbe564d83
-- name: v1.24.2/bin/linux/amd64/kube-apiserver
-  sha256: a70a704835450130f8feeac9d42617d527e269c25a5aa92590e54533c2d4f776
-- name: v1.24.2/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/amd64/kube-apiserver.tar
-  sha256: 7b6ce0847780b63e9f660a8df6cc86644fb0ac98d202564b1c5d107437dc2a11
-- name: v1.24.2/bin/linux/amd64/kube-controller-manager
-  sha256: 92cafe2fa509d801a149b1780fd54cbca17e9c31e086ff6edc414a9bf4950961
-- name: v1.24.2/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 667ec519add5d51de6ec4052e90b89ab1e791173f109ca7e3c85079e4f362182
-- name: v1.24.2/bin/linux/amd64/kube-log-runner
-  sha256: 23a8e00d318f7205fbc87d14c0ef07ee1716a42b952fc9bcdf9b688451a0dce8
-- name: v1.24.2/bin/linux/amd64/kube-proxy
-  sha256: 2d99666ec06573be2b4e4f06dd66f8630cc196c00b1351c252335be766572ab2
-- name: v1.24.2/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/amd64/kube-proxy.tar
-  sha256: 916b2a157f729d6163b6a02820101c794efdf552df9000e8c9e9168092233f2f
-- name: v1.24.2/bin/linux/amd64/kube-scheduler
-  sha256: 84d130cadafdc1b1512fc12b37159b71459587a7aa30c30257dbd172b9835259
-- name: v1.24.2/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/amd64/kube-scheduler.tar
-  sha256: 3f02b87b20f1caba5257929634e21939ff02b2de2552aeeaaf36e1eb9c08c9ad
-- name: v1.24.2/bin/linux/amd64/kubeadm
-  sha256: 028f73b8e7c2ae389817d34e0cb829a814ce2fac0a535a3aa0708f3133e3e712
-- name: v1.24.2/bin/linux/amd64/kubectl
-  sha256: f15fb430afd79f79ef7cf94a4e402cd212f02d8ec5a5e6a7ba9c3d5a2f954542
-- name: v1.24.2/bin/linux/amd64/kubectl-convert
-  sha256: 03efb5dbea19f9df05e6c84df1ccbae1f94d69a969bb17ec1cce006d2e7bb799
-- name: v1.24.2/bin/linux/amd64/kubelet
-  sha256: 13da57d32be1debad3d8923e481f30aaa46bca7030b7e748b099d403b30e5343
-- name: v1.24.2/bin/linux/amd64/mounter
-  sha256: 14717fc6b15df80a0db00cf58617b0f05f643374701e1448b3cada58ed24c279
-- name: v1.24.2/bin/linux/arm64/apiextensions-apiserver
-  sha256: 08150684d93d0b5885672ad13463bf59b14adbde1ff43fbf05e2ec66e94eb81e
-- name: v1.24.2/bin/linux/arm64/kube-aggregator
-  sha256: 698c8436082df0ea1cb68500eb009a1285e97ad588bcae61050b0a09a44c52f7
-- name: v1.24.2/bin/linux/arm64/kube-apiserver
-  sha256: 3a5724e05a0aa3baa4e580744f0fe2ac1a08bee82d60922d6f7c4f5a4fe7c1e0
-- name: v1.24.2/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/arm64/kube-apiserver.tar
-  sha256: b50e5ff805b6e0640a7b783f2d8e466f7e39ebb58c20c5384d7e67c23be40bc1
-- name: v1.24.2/bin/linux/arm64/kube-controller-manager
-  sha256: 0c83882b0b974ef1ddf2c96573cd63c514628f555000ddf9321c8e5e0389d6b1
-- name: v1.24.2/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 00f831b22c4eedc4c17fc2d02d88d41582f243291350a0f39c43c1ea1b0f1d20
-- name: v1.24.2/bin/linux/arm64/kube-log-runner
-  sha256: f43ebb61d554d21f5ccf0bf64d303b51c679565e9e39d5873dfca3a6daf350ab
-- name: v1.24.2/bin/linux/arm64/kube-proxy
-  sha256: b9528f84b45918c94852174918ebacb320314113badee49f45783f4ae48b9227
-- name: v1.24.2/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/arm64/kube-proxy.tar
-  sha256: f8698b05b5cf8becfa5ede60880f329a96a02650ef5e765f65c7ed4d346a1269
-- name: v1.24.2/bin/linux/arm64/kube-scheduler
-  sha256: 05b5faeb3650eaf40ab6a1b2ac8b6214f0a4b24a4d31c69f4179ee5eface4d5b
-- name: v1.24.2/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: a1bdf2dbf81a380771e2ce016fdc077bec2abbf6ebf1e3e0b1e7b3b0514b0d80
-- name: v1.24.2/bin/linux/arm64/kube-scheduler.tar
-  sha256: a970e2c69231ebd73b34b5496d3d1c0dff38d4ddb5f7b58abeeed59a1d0c5e2e
-- name: v1.24.2/bin/linux/arm64/kubeadm
-  sha256: bd823b934d1445a020f8df5fe544722175024af62adbf6eb27dc7250d5db0548
-- name: v1.24.2/bin/linux/arm64/kubectl
-  sha256: 5a4c3652f08b4d095b686e1323ac246edbd8b6e5edd5a2626fb71afbcd89bc79
-- name: v1.24.2/bin/linux/arm64/kubectl-convert
-  sha256: c13abd435a385bcfb1500044a14650bd6f03bb2ca3ccaba4c53d918ffc5ef75e
-- name: v1.24.2/bin/linux/arm64/kubelet
-  sha256: 40a8460e104fbf97abee9763f6e1f2143debc46cc6c9a1a18e21c1ff9960d8c0
-- name: v1.24.2/bin/linux/arm64/mounter
-  sha256: dbc153547fdd3660670b2a748fc1ed1aec263803b8e4e20a1e555c48c4fedf5b
-- name: v1.24.2/kubernetes-release.spdx
-  sha256: 658f9f80acce8acf5de9fba045059dfcb0eed4d496b4cfa30d621c6fa57f6bb0
-- name: v1.24.2/kubernetes-source.spdx
-  sha256: d297a56fa945c64bd2e3b4ee575f3165ae6543c29e4c4736ea8af8163db3f2b4
-# kubernetes 1.24.3
-- name: v1.24.3/bin/darwin/amd64/kubectl
-  sha256: c585f970cdf76adab9cd5c32c29aa67fe4c1a6e3a5af113598524f94fe46a7c2
-- name: v1.24.3/bin/darwin/amd64/kubectl-convert
-  sha256: 6e2df2dd48bacf43a976c335574fa4c7dd284c92ff124d9e54ae578c16d57579
-- name: v1.24.3/bin/darwin/arm64/kubectl
-  sha256: 653a31a944b220660684de8b963ddc7c4d5b2792d172f9ce30acb3f6a88e3c82
-- name: v1.24.3/bin/darwin/arm64/kubectl-convert
-  sha256: 2bbacf3de907186add5b5aa2443ae2cd7c7503e40252f461f596605563adc490
-- name: v1.24.3/bin/linux/386/kubectl
-  sha256: c5f51ac5a5712c69595ef4d2c897abeae85afdf1b43a7f50167ce799fc517ee1
-- name: v1.24.3/bin/linux/386/kubectl-convert
-  sha256: 7d1403a66d9128e0ce5277407e110f63d4b53671455ba72032eb2467a0b655c5
-- name: v1.24.3/bin/linux/amd64/apiextensions-apiserver
-  sha256: 6c713afef5d8e8bbbf83148bf3b5eac4b9326764634f628fe41f1d0ee2265e76
-- name: v1.24.3/bin/linux/amd64/kube-aggregator
-  sha256: accd35bceccc2011f2b3f22e153e1c745dcce094c9968783d5bb03a7b02f191d
-- name: v1.24.3/bin/linux/amd64/kube-apiserver
-  sha256: b016f214e1d57f5e8b26342a4424c6db91fa7ccf456f01e1998823a829c2616e
-- name: v1.24.3/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/amd64/kube-apiserver.tar
-  sha256: c0544585a13022db0ef1e5951a2ef7cd541820a3baeeceee86716d23d5bffe59
-- name: v1.24.3/bin/linux/amd64/kube-controller-manager
-  sha256: 8813c4577741e756f5907636c527ab553d162ce59eed090f764d25a6fcdb6989
-- name: v1.24.3/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 1288131bc743561cbdce4dc27de810fc8d8e5fc0b00668ee3a9b52fba6d2e9f9
-- name: v1.24.3/bin/linux/amd64/kube-log-runner
-  sha256: 60c350392b98777e9a03a01bc9743af35729f8afadb3884045a2c866590e33a0
-- name: v1.24.3/bin/linux/amd64/kube-proxy
-  sha256: df19780e7f603448782b6f686e6214e17b06d8e340d40a6d06d15085d9d69b85
-- name: v1.24.3/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/amd64/kube-proxy.tar
-  sha256: 917e7daaacf4d625abce6880e56a4396ba4a9aa3270a90f8b5a5847facd5a033
-- name: v1.24.3/bin/linux/amd64/kube-scheduler
-  sha256: 2cb5c2180ca37b4769610ae0d152382d13fe7089c9b1170769a46f3ccb696489
-- name: v1.24.3/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/amd64/kube-scheduler.tar
-  sha256: 866cbf2ae7caa9feaf92e81456ef8316c29b69ccd6eafbf788f3c9f0e4895760
-- name: v1.24.3/bin/linux/amd64/kubeadm
-  sha256: 406d5a80712c45d21cdbcc51aab298f0a43170df9477259443d48eac116998ff
-- name: v1.24.3/bin/linux/amd64/kubectl
-  sha256: 8a45348bdaf81d46caf1706c8bf95b3f431150554f47d444ffde89e8cdd712c1
-- name: v1.24.3/bin/linux/amd64/kubectl-convert
-  sha256: 682bb7c523bce14d5b8113f49d8ac7789dcf7de9022d92499bf9d378b0e85c32
-- name: v1.24.3/bin/linux/amd64/kubelet
-  sha256: da575ceb7c44fddbe7d2514c16798f39f8c10e54b5dbef3bcee5ac547637db11
-- name: v1.24.3/bin/linux/amd64/mounter
-  sha256: 90f6e68b1a0beb37863bac609a38b6d66422219096ad2fe747198f8dc7780371
-- name: v1.24.3/bin/linux/arm64/apiextensions-apiserver
-  sha256: 092c8812a04c2807a46e3876913e4db45dbabc8bed4b990b70fe4722f86f8882
-- name: v1.24.3/bin/linux/arm64/kube-aggregator
-  sha256: 11dc4e6a6a970e0ae46a1a4ef8251c2421d830d9fc08b353901552807b97dc0b
-- name: v1.24.3/bin/linux/arm64/kube-apiserver
-  sha256: f2587fe4a889bfcd90b7484f11aa32e0e6ac3dbb63009ddc068e858c20a281af
-- name: v1.24.3/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/arm64/kube-apiserver.tar
-  sha256: 5279f5d5816cd898b642c738c50ca1029adf8fdc7cb402eb5a090eb71ef0399e
-- name: v1.24.3/bin/linux/arm64/kube-controller-manager
-  sha256: 1140d02f181a62245879be776f4aa8c48d64177f2de411104f24cee1aafb96f9
-- name: v1.24.3/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 5b5e7d5e9bfa288053c4c14a6a6c802ac97de07f80df92d4c601302c4d55c318
-- name: v1.24.3/bin/linux/arm64/kube-log-runner
-  sha256: 6d851d05b2fbeca2328fd273658dbd7f1951e663a0abf660619e681c31ca9b07
-- name: v1.24.3/bin/linux/arm64/kube-proxy
-  sha256: 3506c2037a7f5532b71412ae2c3f50e57df06e6d0a0cc57d51693a63a724c2bb
-- name: v1.24.3/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/arm64/kube-proxy.tar
-  sha256: f27a886c07ceaa012fd9d669d76c5665bc80da68d9b49c3dbbbe6acdd52a9001
-- name: v1.24.3/bin/linux/arm64/kube-scheduler
-  sha256: e30cd92e8b3c7e815b95a9e7cc6ff2224e0bbdc1b6d20847fc60c752f47011fd
-- name: v1.24.3/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: e23e23a7caeed29bacfcecb6a1d3610fa2957bb92a99b16c392019e05af5f8d6
-- name: v1.24.3/bin/linux/arm64/kube-scheduler.tar
-  sha256: 40e019cf964687680adef6f4b73674f88478d59bc71236980e869b6e98e48d3e
-- name: v1.24.3/bin/linux/arm64/kubeadm
-  sha256: ea0fb451b69d78e39548698b32fb8623fad61a1a95483fe0add63e3ffb6e31b5
-- name: v1.24.3/bin/linux/arm64/kubectl
-  sha256: bdad4d3063ddb7bfa5ecf17fb8b029d5d81d7d4ea1650e4369aafa13ed97149a
-- name: v1.24.3/bin/linux/arm64/kubectl-convert
-  sha256: 73c9f266cd0f36f05fa34ed3c9256131cb9442d760d77cc8528682abb9d7c27c
-- name: v1.24.3/bin/linux/arm64/kubelet
-  sha256: 6c04ae25ee9b434f40e0d2466eb4ef5604dc43f306ddf1e5f165fc9d3c521e12
-- name: v1.24.3/bin/linux/arm64/mounter
-  sha256: e38196a09739583288c54257f63255c6b53e1972ffc50df1ebce9012f5677d30
-- name: v1.24.3/kubernetes-release.spdx
-  sha256: e6424b65b23120a3a36fbfb2297a3995e7e4a9b87d22cb6981d396475e43339b
-- name: v1.24.3/kubernetes-source.spdx
-  sha256: 969381031adea2f3daa59cc727ca949f85aa78a8f7af75e0c2e22c13b5f88467
-# kubernetes 1.24.4
-- name: v1.24.4/bin/darwin/amd64/kubectl
-  sha256: adb6f4bd48a698547b0d48ea109d06c36367dcc507470072f1fe723d3c363f08
-- name: v1.24.4/bin/darwin/amd64/kubectl-convert
-  sha256: 9db92af33ab111e409dbae3b9a0673bcdad8f26be67c0a9269f62cc2a0d7484c
-- name: v1.24.4/bin/darwin/arm64/kubectl
-  sha256: 791f748ffb25c4a156d67237052de65808638c7c2006dd01f57ca2f94206d039
-- name: v1.24.4/bin/darwin/arm64/kubectl-convert
-  sha256: 64c208b741378174b848d1c38dd16b2a588247f3b69a46a2d49ec17ce70b9072
-- name: v1.24.4/bin/linux/386/kubectl
-  sha256: 2e8a002584045ea86834ce59d9f945ab9be7003d5f217eaa6f72654d84ca1b91
-- name: v1.24.4/bin/linux/386/kubectl-convert
-  sha256: 27996d10d459255e04eff17adbb8842ce67ab160e38770a89dd1858d522aef6d
-- name: v1.24.4/bin/linux/amd64/apiextensions-apiserver
-  sha256: 6ccb0500847162f5ef4ac57b15a87f45086ffa9ec0cfc99402f2b15e0d112eeb
-- name: v1.24.4/bin/linux/amd64/kube-aggregator
-  sha256: bfd2b63e42611b324ac94704c6fc1297bf2393d139f1716a7085696639dca581
-- name: v1.24.4/bin/linux/amd64/kube-apiserver
-  sha256: 647c0dd8abba886771285907be0c0bb6a34514b69a5a1b53a8b911d886da33e1
-- name: v1.24.4/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/amd64/kube-apiserver.tar
-  sha256: b76a5f761c3c0ec85eaeb1425de1315662f8eca190fce17293c5dd2320e95978
-- name: v1.24.4/bin/linux/amd64/kube-controller-manager
-  sha256: a4b1209cc2aa7e8425d589d2d8a9f3db30c1f09ca798d2f45c85ceb6f56fb77e
-- name: v1.24.4/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 3e6dbe6515325f339cad2dcbb8658d5549b58619f7f9d7d5741b1c7411c490ba
-- name: v1.24.4/bin/linux/amd64/kube-log-runner
-  sha256: 02403d8aa8adf45b2821729a580fd73a1bfb15df607b6c812b333da5793a8554
-- name: v1.24.4/bin/linux/amd64/kube-proxy
-  sha256: 702c9a73fc8e86ad86e5558a5601f9b21ff75f1ab1886fcbea1aadedbb3ea309
-- name: v1.24.4/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/amd64/kube-proxy.tar
-  sha256: 51377278d6cd5a53b6825071d6a209160a2ea4b0b56b4d70b5c0b1ed39101bf2
-- name: v1.24.4/bin/linux/amd64/kube-scheduler
-  sha256: 87c3c19b3b2e2f04cc36a02e0a5ff802791f2f471e09efa26278dc228ebfa7ed
-- name: v1.24.4/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/amd64/kube-scheduler.tar
-  sha256: 75a4b551e91a3f219acb876e16787cd86c308f13efe5a4b052c5930edc68c5e5
-- name: v1.24.4/bin/linux/amd64/kubeadm
-  sha256: 9ec08e0905c0a29a68676ba9f6dd7de73bef13cfa2b846a45e1c2189572dc57c
-- name: v1.24.4/bin/linux/amd64/kubectl
-  sha256: 4a76c70217581ba327f0ad0a0a597c1a02c62222bb80fbfea4f2f5cb63f3e2d8
-- name: v1.24.4/bin/linux/amd64/kubectl-convert
-  sha256: 42433db93568fea99182992d8bf57e8609fa69600bb108b40955c639a331b791
-- name: v1.24.4/bin/linux/amd64/kubelet
-  sha256: 0f34d12aaa1b911adbf75dd63df03d0674dde921fa0571a51acd2b5b576ba0a4
-- name: v1.24.4/bin/linux/amd64/mounter
-  sha256: e2a18fc718d63cc694649b395bdd8f90c8155cadcbeffd3361cb109eb266c8b3
-- name: v1.24.4/bin/linux/arm64/apiextensions-apiserver
-  sha256: 4a9184f012c85fae82a995c844d09f0d8af9d1dea2e1a32b2c627c6558db5164
-- name: v1.24.4/bin/linux/arm64/kube-aggregator
-  sha256: 082bac3ba0e2e91f302043ecb6b0f2f133541bdae63beac744b6b9e13ef79e99
-- name: v1.24.4/bin/linux/arm64/kube-apiserver
-  sha256: 056214e1dd426f75d60830d5a872a156aa0525edfbedd87af849827656f60881
-- name: v1.24.4/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/arm64/kube-apiserver.tar
-  sha256: c742f8456e5937499c995f6b7b951f2962705105bf81774f15252900552e03ca
-- name: v1.24.4/bin/linux/arm64/kube-controller-manager
-  sha256: dc8a92f9bd2292c07d3944fc38e6c9743d4de3a2baba8fbf9ede1de5a371165e
-- name: v1.24.4/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 2bd19674599443f299fbdb7b140003c2eaff33900be30f6a7662d75badfe8df1
-- name: v1.24.4/bin/linux/arm64/kube-log-runner
-  sha256: 168cd8cec66f119eca8c342c1cc700644a4fa2b163776540aeb944649567fd99
-- name: v1.24.4/bin/linux/arm64/kube-proxy
-  sha256: 81b7f86f5102b482ebc740931e211ab021ec9db33d98022cdf5b88a315e89151
-- name: v1.24.4/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/arm64/kube-proxy.tar
-  sha256: 35c05eea3aef5e5d6acfa9099d347bc06fcaa0e6fc97cd1de644d4c9064f96d9
-- name: v1.24.4/bin/linux/arm64/kube-scheduler
-  sha256: 6f077e2483e540e47e8cd92ac7a16779b213b9132f85ac136d15130fabb8f5b6
-- name: v1.24.4/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 7243c1cc24b6c8639ea9ffac79cf22eb636dbf36fd4f60c7bdc9d7fa0961e61d
-- name: v1.24.4/bin/linux/arm64/kube-scheduler.tar
-  sha256: a50ec7b024905312872b752d606eba16709367437473b74c80436547055626aa
-- name: v1.24.4/bin/linux/arm64/kubeadm
-  sha256: 18de228f6087a2e5243bffcd2cc88c40180a4fa83e4de310ad071b4620bdd8b6
-- name: v1.24.4/bin/linux/arm64/kubectl
-  sha256: 0aa4a08ff81efe3fc1a8ef880ca2f8622e3b1f93bf622583d7b9bfe3124afe61
-- name: v1.24.4/bin/linux/arm64/kubectl-convert
-  sha256: 0d341ca8c4d26f9afc15e56b3a8c69e893d198e390c3bf1579538d43dc107820
-- name: v1.24.4/bin/linux/arm64/kubelet
-  sha256: 2d9817c1e9e1edd9480aa05862ea6e9655a9512d820b1933175f5d7c8253ca61
-- name: v1.24.4/bin/linux/arm64/mounter
-  sha256: 14da0dd36f23386a407ba7bc7d061939a59e6d2daad8248a7377223e1608b3cd
-- name: v1.24.4/kubernetes-release.spdx
-  sha256: 40a87e8b4a7a5b2f74c7fc65130d20d70f1ff3a8adad7c10e7b1a5de178cc843
-- name: v1.24.4/kubernetes-source.spdx
-  sha256: c9edd2bd4838ef424896b61c5d6ea48b325d5d0d3f300dea2d5459a908fa8258
-# kubernetes 1.24.5
-- name: v1.24.5/bin/darwin/amd64/kubectl
-  sha256: 5956553c5923f457c9b1cf85e7e4df1a6bc9815679c270dd8dc7b0570f33d6af
-- name: v1.24.5/bin/darwin/amd64/kubectl-convert
-  sha256: c69e287bf0a358f3c642bdf62bcc2027cd90592750f713b60b8f4106dc8a3bb7
-- name: v1.24.5/bin/darwin/arm64/kubectl
-  sha256: 5ae52204537a38ddb405baf750acd86a102d070be6ad4de649205986438cb285
-- name: v1.24.5/bin/darwin/arm64/kubectl-convert
-  sha256: 309fc93bfa9575468b84a7deaaf2ebb7fb4a875650971426f03e9c72a90beeed
-- name: v1.24.5/bin/linux/386/kubectl
-  sha256: 493e3ce893751eff3898362ec79e93eb2f11e76d8bb317537447a7779e7fd8f4
-- name: v1.24.5/bin/linux/386/kubectl-convert
-  sha256: 2937fd983f7a0b698aca86a494c8e93db0ed22ce8749165e9899c6aa9ecfd577
-- name: v1.24.5/bin/linux/amd64/apiextensions-apiserver
-  sha256: d2df0644efc1dc2f9a71f62178df8651685af576a0b01cc15b6518e6806a26e8
-- name: v1.24.5/bin/linux/amd64/kube-aggregator
-  sha256: 8ee0d0c41b7c8e1ef03c07382050fc5b3d219a8c299207c41566af42995d4d14
-- name: v1.24.5/bin/linux/amd64/kube-apiserver
-  sha256: fc7c7ed761994414d63870e9250d60ef525d91cc917e52b5bb416bada7f523b1
-- name: v1.24.5/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/amd64/kube-apiserver.tar
-  sha256: b486558bb92812a85ac0e2fbe77e5fa105dab0b13811b99d40524ff3733a8e0b
-- name: v1.24.5/bin/linux/amd64/kube-controller-manager
-  sha256: 3ecde6dca0371d4255cc9fa1889d3501bf4cbc5f59daffb4e7f2590846164db4
-- name: v1.24.5/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/amd64/kube-controller-manager.tar
-  sha256: c7ae6b8732564b1b3c477f6e29304f293cd1f5300c4d8329430e434bc4dc531a
-- name: v1.24.5/bin/linux/amd64/kube-log-runner
-  sha256: 44ca63f397927263a0a54dffd156fb4ce5b74fa63dc2b3e0090f558ad098117f
-- name: v1.24.5/bin/linux/amd64/kube-proxy
-  sha256: 275a938ca6a1c96df3a75cbe169dd7b9e9f8a542cae42cb06d6ecbdeb501966b
-- name: v1.24.5/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/amd64/kube-proxy.tar
-  sha256: 2db37292ae72180134c4e46a7dfe3c66da0b2c78c705767895910b6adef0729a
-- name: v1.24.5/bin/linux/amd64/kube-scheduler
-  sha256: a6fe0fe9150d83eaa0e54c95e39d3becea769a5a6229dddace7ada58e827d5e3
-- name: v1.24.5/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/amd64/kube-scheduler.tar
-  sha256: d0c551a6637c891a9b317f2e1b833cf0d2703c62f6158d1a7c85b81edf709c9f
-- name: v1.24.5/bin/linux/amd64/kubeadm
-  sha256: 3b9c1844ec0fc3c94015d63470b073a7b219082b6a6424c6b0da9cf97e234aeb
-- name: v1.24.5/bin/linux/amd64/kubectl
-  sha256: 3037f2ec62956e7146fc86defb052d8d3b28e2daa199d7e3ff06d1e06a6286ed
-- name: v1.24.5/bin/linux/amd64/kubectl-convert
-  sha256: 83d25292c9616e6cab4a7b1260d3e586579b2413693b67c53e4e781a7b375c67
-- name: v1.24.5/bin/linux/amd64/kubelet
-  sha256: 2448debe26e90341b038d7ccfcd55942c76ef3d9db48e42ceae5e8de3fbad631
-- name: v1.24.5/bin/linux/amd64/mounter
-  sha256: fa43bdfbc5020d111bad710193f53b3cb08758f99ff48b77943ebf0a13cdc8ca
-- name: v1.24.5/bin/linux/arm64/apiextensions-apiserver
-  sha256: ee05ed368377d46fca3a3462486e0d41b16f4e399d7cb709ecbf81bc6a75a1f2
-- name: v1.24.5/bin/linux/arm64/kube-aggregator
-  sha256: a3564cbf7e3dacb7a478aa4266090b6c6d8b8e26bc2254d6174b58f64c9bd4a8
-- name: v1.24.5/bin/linux/arm64/kube-apiserver
-  sha256: 83b0b8549002642ce8e40950bddde6726d0208abec82b72eb4b68c0c45958eeb
-- name: v1.24.5/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/arm64/kube-apiserver.tar
-  sha256: aca1dcf348b55829805fa18e897b3794e6c193799f40484ba95c1c8970bddbce
-- name: v1.24.5/bin/linux/arm64/kube-controller-manager
-  sha256: 3f260bae7c92b8bfd0a1efd92ea7ee9a8f55a0409f7f775aa795cfe02218e015
-- name: v1.24.5/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/arm64/kube-controller-manager.tar
-  sha256: acd88047124b73a0abe87bd9c0156bd0ef420f9e3136aab327a16eca86a43d5a
-- name: v1.24.5/bin/linux/arm64/kube-log-runner
-  sha256: 0fab07d54550336c5c3d26915bec00e6ef95f357a8b2da35d88436d5283fde46
-- name: v1.24.5/bin/linux/arm64/kube-proxy
-  sha256: dc65bb0aa1e43d86da11e61b5cb588eafeef060c5bced5633f466d60db9a244d
-- name: v1.24.5/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/arm64/kube-proxy.tar
-  sha256: 7638eade34644e737e6a236d72eb306efadc72b37547cba4d0ac43503d8b23a0
-- name: v1.24.5/bin/linux/arm64/kube-scheduler
-  sha256: 250e11d92c61eddfaf27295994431204d9a90880b15fc59df0336301dc777b06
-- name: v1.24.5/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: b8a085f638ba66e91951bdd6e33baa13f07053d9167c194202a646f86935b31d
-- name: v1.24.5/bin/linux/arm64/kube-scheduler.tar
-  sha256: a3458cdf6f86add4948ded11f734c52d9954abd3375a9cf607e7b809bfaeb70a
-- name: v1.24.5/bin/linux/arm64/kubeadm
-  sha256: a68c6dd24ef47825bb34a2ad430d76e6b4d3cbe92187363676993d0538013ac2
-- name: v1.24.5/bin/linux/arm64/kubectl
-  sha256: a5e348758c0f2b22adeb1b663b4b66781bded895d8ea2a714eb1de81fb00907a
-- name: v1.24.5/bin/linux/arm64/kubectl-convert
-  sha256: 03a9b71de8b059f0bee3408b3f78b69d3e0f06e904eff88c8a2444b6d0899a65
-- name: v1.24.5/bin/linux/arm64/kubelet
-  sha256: dd5dcea80828979981654ec0732b197be252a3259a527cbc299d9575bc2de3e8
-- name: v1.24.5/bin/linux/arm64/mounter
-  sha256: b36408c44dbc97f6b3f3f955426b0505782b86b1fe16787f79970a0565d8c0fb
-- name: v1.24.5/kubernetes-release.spdx
-  sha256: cf4d6ace10781d17810bbd99f6595258f71bedf5d230912c400709df4e269a58
-- name: v1.24.5/kubernetes-source.spdx
-  sha256: 196cad845390955751aa9be52eccfdd7c082dc5fac41a2841d5f84da89b043bd
-# kubernetes 1.24.6
-- name: v1.24.6/bin/darwin/amd64/kubectl
-  sha256: cbd3b89a698e11ae8f9ac95a3db4ace8853da1de9f99b087d26f136a30c8d6b4
-- name: v1.24.6/bin/darwin/amd64/kubectl-convert
-  sha256: 883c7583d94920c593b7cff228faeffd3fc51457e2ca75242a90e87fd4e804e5
-- name: v1.24.6/bin/darwin/arm64/kubectl
-  sha256: 7d5ac0e9e6e469d3f819d060f71d9bee31781c536cd10fe9e326661f93e82abd
-- name: v1.24.6/bin/darwin/arm64/kubectl-convert
-  sha256: 4788b5ab7f1c83809312c524bd4f346a6163903bdbdbaaef08cd9e5a11ee9f84
-- name: v1.24.6/bin/linux/386/kubectl
-  sha256: a00c0a2397c0dd37dfe90aa7046f56a300cb089f981edb19099fe31f0c44cda0
-- name: v1.24.6/bin/linux/386/kubectl-convert
-  sha256: 3d2016db35044c0b67f37fcf2f38e00d9487c19c332d7b93b65301efea48b5e0
-- name: v1.24.6/bin/linux/amd64/apiextensions-apiserver
-  sha256: 56bdd1c8d54669ea8a14fd9bdef568cbefe100b880ddf76e31d92b4bc2d63895
-- name: v1.24.6/bin/linux/amd64/kube-aggregator
-  sha256: 5c140487a8a24e686d004654e456cdbb2dee95ec44761bfb7c5d8581cc11f0c6
-- name: v1.24.6/bin/linux/amd64/kube-apiserver
-  sha256: af7d0450a316d80007f2b2ebf747f4b76010678a186759960f1fa9b14eeb7327
-- name: v1.24.6/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/amd64/kube-apiserver.tar
-  sha256: 4b6a5a150273a451fb34e4b6004ab0833e9f56063212411d19031129f990e324
-- name: v1.24.6/bin/linux/amd64/kube-controller-manager
-  sha256: ada949e0dcc462ec1d8a0f6f44fd6113f08d4821a38ff85bf5cf0d6f47b2a5af
-- name: v1.24.6/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/amd64/kube-controller-manager.tar
-  sha256: c368108e264fd07222cfd7140d4c0d31929571d3213dc41122e6c7e3adc3ec5c
-- name: v1.24.6/bin/linux/amd64/kube-log-runner
-  sha256: 0d41e4807fe7dcd23331c18241368cb2b6cc9e8cf0ad723f1a69523ec6148093
-- name: v1.24.6/bin/linux/amd64/kube-proxy
-  sha256: bbed3d06cd71ac4916fce3f7a31f51ab92ac04c0afef74face74614cb7aef397
-- name: v1.24.6/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/amd64/kube-proxy.tar
-  sha256: 9402fc1bdb3adafb00d552e369d09ef373d926f3c30a83d8729650af5b7ed8ce
-- name: v1.24.6/bin/linux/amd64/kube-scheduler
-  sha256: 16226197855de1e0dca0f00babcd11025cc955315052af665a6c3e5aef78c244
-- name: v1.24.6/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/amd64/kube-scheduler.tar
-  sha256: d3b81a5c111566a5932b197779bb7fe690a27a0d35b987aac0a13c948fc451f9
-- name: v1.24.6/bin/linux/amd64/kubeadm
-  sha256: 7f4443fd42e0e03f6fd0c7218ca7e2634c9255d5f9d7c581fe362e19098aec4c
-- name: v1.24.6/bin/linux/amd64/kubectl
-  sha256: 3ba7e61aecb19eadfa5de1c648af1bc66f5980526645d9dfe682d77fc313b74c
-- name: v1.24.6/bin/linux/amd64/kubectl-convert
-  sha256: f1a778b4f464b294bce13a7c790511c9eef55711411c72f1c503bcdabd593488
-- name: v1.24.6/bin/linux/amd64/kubelet
-  sha256: f8b606f542327128e404d2e66a72a40dc2ddb4175fb8e93c55effeacea60921b
-- name: v1.24.6/bin/linux/amd64/mounter
-  sha256: ff651f4a29cebaa592d4d67088047e45ab0d26b6b5ffd0fe06d7b7600fac7471
-- name: v1.24.6/bin/linux/arm64/apiextensions-apiserver
-  sha256: c974d4d62c302106f71856c07c89661427ece9053430df27da4b26d15240c320
-- name: v1.24.6/bin/linux/arm64/kube-aggregator
-  sha256: 8b38b67b72333182486834c26d1a88e177e3dae2d8afce90610f7f60f0641c70
-- name: v1.24.6/bin/linux/arm64/kube-apiserver
-  sha256: 8581de0f5c0d068844239210b7037d0db4b7637b3b21354eb5be759b79c61d63
-- name: v1.24.6/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/arm64/kube-apiserver.tar
-  sha256: 32847102c6fa9b74d4a617d11f37f8e0154353d06041c4f7d01028b5910b7fd9
-- name: v1.24.6/bin/linux/arm64/kube-controller-manager
-  sha256: 4102bd1f220453ac1345e7c8d0d377da078af276ba80cf44a774a42c5d156e78
-- name: v1.24.6/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 34a472dddaaa16f30dc2cf2f08a3cb3d2623aa213769986233a57dcf680cf008
-- name: v1.24.6/bin/linux/arm64/kube-log-runner
-  sha256: d1aefaf015fe7323837fe1f1ff485f4570b6896a72cc641c592d67aad19a9825
-- name: v1.24.6/bin/linux/arm64/kube-proxy
-  sha256: 1427c0d533238e42dc79bbcbccf349345c30b31341cadff54180cbb5698bd36a
-- name: v1.24.6/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/arm64/kube-proxy.tar
-  sha256: 2846b0384c0bef6e5228cdc8ff25e479875b29779e59320cbe2a1ac1d204aa74
-- name: v1.24.6/bin/linux/arm64/kube-scheduler
-  sha256: cd2eb5d9449b5228cc35a1ee37c734588ddbe9157d9fd4d9d45ec3ae43aff5bb
-- name: v1.24.6/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: e93c7424ac34cf81bdcb7dae4944146f9d781fc2554feba9aa64fc9ab9564e70
-- name: v1.24.6/bin/linux/arm64/kube-scheduler.tar
-  sha256: 04381f30119d9135fd06c5215e58103c6dbe12e9bb5011d8bc9116d10df11002
-- name: v1.24.6/bin/linux/arm64/kubeadm
-  sha256: 211b8d1881468bb673b26036dbcfa4b12877587b0a6260ffd55fd87c2aee6e41
-- name: v1.24.6/bin/linux/arm64/kubectl
-  sha256: 2f62e55960b02bb63cbc9154141520ac7cf0c2d55b45dd4a72867971e24a7219
-- name: v1.24.6/bin/linux/arm64/kubectl-convert
-  sha256: 83763db0429111c6a8cffc1061cfd1da34ff3d685494084f4f9a2d829f193779
-- name: v1.24.6/bin/linux/arm64/kubelet
-  sha256: 2a7b8e131d6823462e38bc1514b5dea5dca86254b3a12ed4a0fa653c2e06dd0e
-- name: v1.24.6/bin/linux/arm64/mounter
-  sha256: 1b5a95f1d628410a1c6e4ed263fd47e8d3c842fad72a71b5a0a64e7e84a98327
-- name: v1.24.6/kubernetes-release.spdx
-  sha256: b933ec0f2d561bdf5eb55cf69ef45ed441f824f347b86d3054049d03f8b5a766
-- name: v1.24.6/kubernetes-source.spdx
-  sha256: 2a5e5a5e12659cb6bc5ef3c9902e951a64f7b4d3b394391b56ceb8a66c68b797
-# kubernetes 1.24.7
-- name: v1.24.7/bin/darwin/amd64/kubectl
-  sha256: 3fccf2c9bec31b0b833b27772495d39b31ff8d98c27920da1ff1612ebcb027ef
-- name: v1.24.7/bin/darwin/amd64/kubectl-convert
-  sha256: 3bae436da0a97e6b3d88fd5e7c85dd2a5f4c4732dd84b665f0db90b2f103f342
-- name: v1.24.7/bin/darwin/arm64/kubectl
-  sha256: 9eda56cb7eeba5870721007b253f80748b69dd23b8c4e7331eb43060176fca47
-- name: v1.24.7/bin/darwin/arm64/kubectl-convert
-  sha256: 39f92843a492457f7bcc849642149e01352ca6b4e46bf0599188f7cc67f09019
-- name: v1.24.7/bin/linux/386/kubectl
-  sha256: 4ec668fe1cc721e0f6da84960c2efa745d52a500762264f1391483f377df6191
-- name: v1.24.7/bin/linux/386/kubectl-convert
-  sha256: 90c943177d0d6bef9be53ab8806132480b6686972bc02c8b95186f9a8b291866
-- name: v1.24.7/bin/linux/amd64/apiextensions-apiserver
-  sha256: 7a98b7aae5adcc09717becc60d526c5f9b8e58cb2954baeb008130c981a8a814
-- name: v1.24.7/bin/linux/amd64/kube-aggregator
-  sha256: 30c0517f14fceb8358b02fb8e16387cab3faa8236849b850198f14b817a4a585
-- name: v1.24.7/bin/linux/amd64/kube-apiserver
-  sha256: b77f91bc86efb07dd6480691306f7a3fe308a2ddaf4a57a25132890d95dc5da4
-- name: v1.24.7/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/amd64/kube-apiserver.tar
-  sha256: 00da8b0c3486d5ca84b7930bbd8f7d03b38bbf9c5d80e83aef378ddf6c002815
-- name: v1.24.7/bin/linux/amd64/kube-controller-manager
-  sha256: e8a7fb8c7c54b8a07a354fb68395d9fb2b43044e416d85ef557bced63ed4af14
-- name: v1.24.7/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 60ed13e1311bbc5e80b80506618cb5018b56f8ee901f2d1dd92c3f02cf467280
-- name: v1.24.7/bin/linux/amd64/kube-log-runner
-  sha256: c9248e379245eb7cb86bad5cc59a7bdd2ec4d69d06374c466179fed9a137636a
-- name: v1.24.7/bin/linux/amd64/kube-proxy
-  sha256: 5b0206e9de3046b0cf7db209781727d5755cdc605590ebaddac2afbfbf569cb0
-- name: v1.24.7/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/amd64/kube-proxy.tar
-  sha256: 03f4276958eab7c7508b4e3a5bc704bef347027a8474380871eeca7d686fcdab
-- name: v1.24.7/bin/linux/amd64/kube-scheduler
-  sha256: c0431f99dadbbe6b0991eea8efba53c0df0350ffc83a332fc1005d97e74b4e70
-- name: v1.24.7/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/amd64/kube-scheduler.tar
-  sha256: e64776f735c7db00738d8e76455fdcf8268a360270edf6883400017ef088217b
-- name: v1.24.7/bin/linux/amd64/kubeadm
-  sha256: 8b67319d28bf37e8e7c224954dc778cbe946f2bb0ed86975d8caa83d51c955ee
-- name: v1.24.7/bin/linux/amd64/kubectl
-  sha256: 2d88e56d668b1d7575b4783f22d512e94da432f42467c3aeac8a300b6345f12d
-- name: v1.24.7/bin/linux/amd64/kubectl-convert
-  sha256: bca97bd1a1ccc4062181e39c6b3193c674bcd3857b4f15e1e6c960781e95a370
-- name: v1.24.7/bin/linux/amd64/kubelet
-  sha256: 4d24c97c924c40971412cc497145ad823e4b7b87ccda97ebced375f7e886e9e2
-- name: v1.24.7/bin/linux/amd64/mounter
-  sha256: 34177bfbe434a4509498a0239118cea2caccc338a61aa4f416455538b08d4f6b
-- name: v1.24.7/bin/linux/arm64/apiextensions-apiserver
-  sha256: 2aa2fbaf5531da0a5e9c6afcf1ff610c6bbc591bd0819091c9d671d73dd1b754
-- name: v1.24.7/bin/linux/arm64/kube-aggregator
-  sha256: 450a9ef56182d6b66b3c1527087bdeebff9d87513db7bbbf5fca9245642fac59
-- name: v1.24.7/bin/linux/arm64/kube-apiserver
-  sha256: f69a3e3cf1e5225fdd7e6c91b20bf30163dd88b3757d371a6e4723ee59c232e9
-- name: v1.24.7/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/arm64/kube-apiserver.tar
-  sha256: 7659cabf1119bf17b225e694f08ee5a6f27ff7a0db01516484dcfa8accf5065a
-- name: v1.24.7/bin/linux/arm64/kube-controller-manager
-  sha256: 97a65571dd394142ed72462a06693bb87853bd4c1e1618c2b502624689d61bfc
-- name: v1.24.7/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 605c3e34096589811679026c160c0b549ca54e99ec5be0a372095afc62f90851
-- name: v1.24.7/bin/linux/arm64/kube-log-runner
-  sha256: 34ea182cdd580ba9d8ba6c6bdfc6b896445893d2cb6828713843abdd0b53bbcb
-- name: v1.24.7/bin/linux/arm64/kube-proxy
-  sha256: 2ea8d0f6eb3a22b78c9dc3cf04ac6ed7e621309b585e4ad20a1949165c6c9c67
-- name: v1.24.7/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/arm64/kube-proxy.tar
-  sha256: 8ef164470f0766a9c78e7b52be88eb51b9b8555602ee995ba6b9593f2f10657b
-- name: v1.24.7/bin/linux/arm64/kube-scheduler
-  sha256: 02684267e9109af572f0b22bbf9d2d0963afb3c41f2d641946cff658524d04f0
-- name: v1.24.7/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 6435645b8fec2ba894e78c0ad89b6e9834e18c0456c45193bcccb7eabe85081b
-- name: v1.24.7/bin/linux/arm64/kube-scheduler.tar
-  sha256: 3b54589197d028ebeebd33b1cca5fdd68ec90968d94414e115970b23b31737ed
-- name: v1.24.7/bin/linux/arm64/kubeadm
-  sha256: ee946d82173b63f69be9075e218250d4ab1deec39d17d600b16b6743e5dca289
-- name: v1.24.7/bin/linux/arm64/kubectl
-  sha256: 4b138a11b13210ce1731e06918f8fff6709c004c6fb6bec28544713854de9fe8
-- name: v1.24.7/bin/linux/arm64/kubectl-convert
-  sha256: c68f1f02881d844541018991e556069bd7952f66a8a34bfcd35105846a63e46e
-- name: v1.24.7/bin/linux/arm64/kubelet
-  sha256: d8bd38e595ca061c53d3b7d1daebe5b3cc1ad44c731666bd5e842d336077db4b
-- name: v1.24.7/bin/linux/arm64/mounter
-  sha256: 105c67d32900d2d869bce8a3dfea37d39ffc69556cbddfa369e0212acb201ab4
-- name: v1.24.7/kubernetes-release.spdx
-  sha256: 6fc53a59b2ee1f7495bd3f3a422ab01602d50bbcdaa4781b9110ac6fbb35d4c5
-- name: v1.24.7/kubernetes-source.spdx
-  sha256: 6456252284a23895179483ff73a2ba6e9453825ffcaca4f165051875e03e04d5
-# kubernetes 1.24.8
-- name: v1.24.8/bin/darwin/amd64/kubectl
-  sha256: 7d2a455aa9d6be0541c5c516a2034bb85007b7be6bc5e4bc1a453cd9e41530a9
-- name: v1.24.8/bin/darwin/amd64/kubectl-convert
-  sha256: c27726f9e20d5728f380da6a7f87e663eb640a939b66abc975a41d152fa9fc5d
-- name: v1.24.8/bin/darwin/arm64/kubectl
-  sha256: ada02ec3ebe98358b27c5f6a4f06bdaa54747087e1aa2a8edb13fdea546250c3
-- name: v1.24.8/bin/darwin/arm64/kubectl-convert
-  sha256: a37a6a5f226853fe465c8eefdd8e9e408480caceb2cdabb6b6efb39ab6946539
-- name: v1.24.8/bin/linux/386/kubectl
-  sha256: e4a687e60b64cb57fa58c1c83e103677b6f5cbb4abfa5edf2a5c670ce56a4133
-- name: v1.24.8/bin/linux/386/kubectl-convert
-  sha256: 44da59d17292cfc4c8b7e6f015b621621ddc2f8462356d88cf9c38dfa3199541
-- name: v1.24.8/bin/linux/amd64/apiextensions-apiserver
-  sha256: 1277e1a98c3a8708ff4a7d25b0aae82e7c38922fae9228d2c02c120335347fcf
-- name: v1.24.8/bin/linux/amd64/kube-aggregator
-  sha256: a63f67033cb480bd676cb020f870e9b72b6abf96d0a67c4b7fc65e6471be3002
-- name: v1.24.8/bin/linux/amd64/kube-apiserver
-  sha256: 83b94e1c6b36f5e4a26535b4728c7360a6066f184b83718c74c63fbf93b3547e
-- name: v1.24.8/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/amd64/kube-apiserver.tar
-  sha256: 4267a35b3b9180b86e6035b54c40c9db92f2bad44f95ef60172427c30e2d9c2a
-- name: v1.24.8/bin/linux/amd64/kube-controller-manager
-  sha256: 61ba9fbcfe6d37185fc16372cd4eb9615887b4172ea433acc3f59e4201361479
-- name: v1.24.8/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 70527532b6301bd9bfcea6da48334fc5a8a2c46a5b18629e584b85cc58228f04
-- name: v1.24.8/bin/linux/amd64/kube-log-runner
-  sha256: 3cfeef231f7177f7ac2e9d5122df7324bf6937232c035a02bb8476365bf00f88
-- name: v1.24.8/bin/linux/amd64/kube-proxy
-  sha256: d05dda50336862af07e4ca88b027ebc67cf1b527c88e57ead7073bbcbc63d805
-- name: v1.24.8/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/amd64/kube-proxy.tar
-  sha256: 130d2b8369c254b48afb0259a322cbfa5301795e6c6d661fe71d8c25d4cd6f7e
-- name: v1.24.8/bin/linux/amd64/kube-scheduler
-  sha256: 6d94d78560ed81ffc097b5a465333bfd81a7573dd419bdf30240848a93d332fe
-- name: v1.24.8/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/amd64/kube-scheduler.tar
-  sha256: 80fdd17788d1a5a512fcc51fd980f1efdf0d8670e7e9c59023c318488d42b6ca
-- name: v1.24.8/bin/linux/amd64/kubeadm
-  sha256: 9fea42b4fb5eb2da638d20710ebb791dde221e6477793d3de70134ac058c4cc7
-- name: v1.24.8/bin/linux/amd64/kubectl
-  sha256: f93c18751ec715b4d4437e7ece18fe91948c71be1f24ab02a2dde150f5449855
-- name: v1.24.8/bin/linux/amd64/kubectl-convert
-  sha256: 823432917320797053da5a002ad750bb17ec0e3163653d8ed5d137d517d22210
-- name: v1.24.8/bin/linux/amd64/kubelet
-  sha256: 2da0b93857cf352bff5d1eb42e34d398a5971b63a53d8687b45179a78540d6d6
-- name: v1.24.8/bin/linux/amd64/mounter
-  sha256: 0d33a5d631053daddefa389a2e1b1d447431f2c326cedf31d47292219a3164d7
-- name: v1.24.8/bin/linux/arm64/apiextensions-apiserver
-  sha256: f375323f78fbc3f99f761fa30a0d034b05fb67785f5a9957b5a59d3440d5287a
-- name: v1.24.8/bin/linux/arm64/kube-aggregator
-  sha256: 7e1f9b1faf9594b8e7cbc8b67167a7afd321c1b7f3e01b15fa55caca4901a6a6
-- name: v1.24.8/bin/linux/arm64/kube-apiserver
-  sha256: 850362c9cfba3e8a88a2b3b894c87680a71df305012af5d11c16b216487aa0f3
-- name: v1.24.8/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/arm64/kube-apiserver.tar
-  sha256: fc706c8f25ad63ee28292b7996ccfb6033b7fabc99cd7cd8be244418a67a79c4
-- name: v1.24.8/bin/linux/arm64/kube-controller-manager
-  sha256: 0151da20dec5de2d0420a0c0f26b862aee01f48fcc6602f5670a0803217d0da6
-- name: v1.24.8/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 5e786133bc437b4d01ec9f6ade5485eebd760e9bbb84ca733d0e763429a3696f
-- name: v1.24.8/bin/linux/arm64/kube-log-runner
-  sha256: afe4427739c4b16660168b333983ac015eee5642e0b36a6b4bb4f3a2ec6cc2dc
-- name: v1.24.8/bin/linux/arm64/kube-proxy
-  sha256: 05fa2b951f609c05e7f56811770136bcb025d4fbf4b217c88d1e30a8cd3c1313
-- name: v1.24.8/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/arm64/kube-proxy.tar
-  sha256: a3ae41c5d55f87beef489b3d8e7bd6b5ab141d713f130ab4c559fbe38e23d8e4
-- name: v1.24.8/bin/linux/arm64/kube-scheduler
-  sha256: 728eaab81b68a61904c17382b2c02cd76b6854f869940139a255e0c77dad9836
-- name: v1.24.8/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 5007c77d77f2c0b8da9e988442a3a3d1fde18b452c41e9d925b4cc4105717cfb
-- name: v1.24.8/bin/linux/arm64/kube-scheduler.tar
-  sha256: d438b5c89a54e470544d47c650c71c72404eefaeef1b890b501618e739029f46
-- name: v1.24.8/bin/linux/arm64/kubeadm
-  sha256: 6f35562001e859f2a76a89c0da61f09433cc6628ccbc3992e82a977e0e348870
-- name: v1.24.8/bin/linux/arm64/kubectl
-  sha256: b8ac2abfcb1fa04695d18098558ff483ec2c2488877b5abc4035a543544cdcb1
-- name: v1.24.8/bin/linux/arm64/kubectl-convert
-  sha256: 0dc3ebb6a96be75b7a41a642319ab10d38c5d0162c0159dd6fcb1098e11f5dc1
-- name: v1.24.8/bin/linux/arm64/kubelet
-  sha256: 4e1427651e4ff3927f96ce4b93c471ccc76c683fc1619ee0d677d77345b54edb
-- name: v1.24.8/bin/linux/arm64/mounter
-  sha256: 320d37f796cde7027b7579ee9da7d7cc1f002af952e83825e80814ab540d24f8
-- name: v1.24.8/kubernetes-release.spdx
-  sha256: db825b41532d9cc8c553c9448e869243aa5c4b34f74a3df7104f9574a3440492
-- name: v1.24.8/kubernetes-source.spdx
-  sha256: fc6583693525418044d5d4ffedc5612f5b2d2c4ebf4c81723250590cd78bd626
-# kubernetes 1.24.9
-- name: v1.24.9/bin/darwin/amd64/kubectl
-  sha256: 42d1109006c9ddf02f7ca4b2bc5ffa393b6ac390c3f1b60473f0e86a83c63c0d
-- name: v1.24.9/bin/darwin/amd64/kubectl-convert
-  sha256: aa3d77b22d5059ebd4cf0af4f6ed8f44c36410a002adaf333e5c47ea06a8c901
-- name: v1.24.9/bin/darwin/arm64/kubectl
-  sha256: cc6dd10b715a638f3dc751aca33fa5b78bf84f83b46307f6cd22a9f21bbca5dc
-- name: v1.24.9/bin/darwin/arm64/kubectl-convert
-  sha256: d038ae086227b0ed71fe55c76bee2b9202aac6daac901ff4439e5cac50831a14
-- name: v1.24.9/bin/linux/386/kubectl
-  sha256: 5052b16e658401bc97dc615e8e4853e461233a580c4631d74cf166af1d099dda
-- name: v1.24.9/bin/linux/386/kubectl-convert
-  sha256: c01ec63d5b78641687146cadec430076d464ca020c940bd5fcfe3fca40f5e884
-- name: v1.24.9/bin/linux/amd64/apiextensions-apiserver
-  sha256: 7853775270fcf5d988fbed45ae8e5d06cf43c19b83f66481461cb8e069b40be5
-- name: v1.24.9/bin/linux/amd64/kube-aggregator
-  sha256: 0568bb40b075630016eea5d2f7b0282d7bfa95bcb5ba90237058cb6e8f26b9e3
-- name: v1.24.9/bin/linux/amd64/kube-apiserver
-  sha256: 7dee7c53d8cec5cd4308862c2faa7b388f4938557e692f8d6d36cb8ab750e54d
-- name: v1.24.9/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/amd64/kube-apiserver.tar
-  sha256: e7e67b210e11b4628d9d300a211dae25c4cbf77e3818fd45400e7c89aa4d3910
-- name: v1.24.9/bin/linux/amd64/kube-controller-manager
-  sha256: 211819d1ca0493436938de2a39c22c97e11f18d45900f0405e586918d4b1f99e
-- name: v1.24.9/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/amd64/kube-controller-manager.tar
-  sha256: e7b24b6a2ea2ee8780cfdb8d240cd5dd891567712903ded474d921eac62a35d0
-- name: v1.24.9/bin/linux/amd64/kube-log-runner
-  sha256: ea733f51af4630983b1bdff5a6a8734f31a0154961bff365eb57b2b650a5fec4
-- name: v1.24.9/bin/linux/amd64/kube-proxy
-  sha256: 4e2e5d82960d9cbefc187182f20bcf8f89788b207107159e01be5c92182ab35a
-- name: v1.24.9/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/amd64/kube-proxy.tar
-  sha256: 221bafda381512c97f029bf073606c3fefc7012e12803d3285ff875cdb5e595f
-- name: v1.24.9/bin/linux/amd64/kube-scheduler
-  sha256: b97c76dc85cbc6066f3658f5d11fd25be8f1013cd89aa1cb51528e145e435a34
-- name: v1.24.9/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/amd64/kube-scheduler.tar
-  sha256: 83fbd05cd68c89adeae8aa55fe608810b6f931a711a893cbb4a8f662c16bf19e
-- name: v1.24.9/bin/linux/amd64/kubeadm
-  sha256: 20406971ae71886f7f8ee7b9a33c885391ae64da561fb679d5819f2ccc19ac9f
-- name: v1.24.9/bin/linux/amd64/kubectl
-  sha256: 7e13f33b7379b6c25c3ae055e4389eb3eef168e563f37b5c5f1be672e46b686e
-- name: v1.24.9/bin/linux/amd64/kubectl-convert
-  sha256: 3252b321249c334e73bcc2f1c063a0d0ee5cefa2d7eee53fea4c0d2f4a7a3624
-- name: v1.24.9/bin/linux/amd64/kubelet
-  sha256: 8753b9ae0c3e22f09dafdb4178492582c28874f70844de38dc43eb3fad5ca8bb
-- name: v1.24.9/bin/linux/amd64/mounter
-  sha256: e3ce84fe6381f238ea3d93c3e4184ed8729997e76e8a6ac2dcff6dcf5287812f
-- name: v1.24.9/bin/linux/arm64/apiextensions-apiserver
-  sha256: 398e6a394535adb559bfce8e2351a1d8404e0e7e2cce5f487974ccb46002991f
-- name: v1.24.9/bin/linux/arm64/kube-aggregator
-  sha256: 40aa7f48e349f5d52611db6e9145c51cb5486e4aa0fb4d0c35bbe9ba65023363
-- name: v1.24.9/bin/linux/arm64/kube-apiserver
-  sha256: aca8d70cd48a06c34a76ca98d2599ee0300ce017cd02d1c5c8729dafaf61f6ac
-- name: v1.24.9/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/arm64/kube-apiserver.tar
-  sha256: 9de0285ce08a046e1e9285cddaa4bb10c45d23f066d751ce82dc8de90ddec86d
-- name: v1.24.9/bin/linux/arm64/kube-controller-manager
-  sha256: b9f39a5e1d6cf70c4d379b388d66566f7e885dbc983878e2bf74a8f274095e73
-- name: v1.24.9/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 7e734a467ac7531b729b736e5602f5a6943374232d46d79b62014b82588f1bb8
-- name: v1.24.9/bin/linux/arm64/kube-log-runner
-  sha256: 9f98aa61870128b992289b2890767e3e144ded9c80f903cb10e5d7535f0ce42e
-- name: v1.24.9/bin/linux/arm64/kube-proxy
-  sha256: 28e7409e3d22bebcddd66233c996eccb86b7b84b1b13b366cd833697e71c5f26
-- name: v1.24.9/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/arm64/kube-proxy.tar
-  sha256: 632b659902e59bf413b49e792290b1251cb7b6ba2173115f9ed6bf2082dfd28c
-- name: v1.24.9/bin/linux/arm64/kube-scheduler
-  sha256: fef3db4b80d77832f76daa7cdcfda32bd50024c9a2168e7abc3a47d19a7aac4f
-- name: v1.24.9/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: b183f390a62a5e698ff1418dd702ced363607a2ef842e9b31ba2ddf40515ed95
-- name: v1.24.9/bin/linux/arm64/kube-scheduler.tar
-  sha256: 497afb2ed8c5802e10ff4ff2fe73ab74278f5cc21518cfc715e909dd12a71dcf
-- name: v1.24.9/bin/linux/arm64/kubeadm
-  sha256: 57c61562a9de4cc78f276f665d7f04666607b17e3ad0fa6c14be64ad85c80951
-- name: v1.24.9/bin/linux/arm64/kubectl
-  sha256: f59c522cf5f9db826c64f28364946acb6bcb6957669291fa29b926b7812b5bbe
-- name: v1.24.9/bin/linux/arm64/kubectl-convert
-  sha256: da5e0df85a7ea279a607c3d069851638c14eef55cdeb8c3390b500397bbf2a9b
-- name: v1.24.9/bin/linux/arm64/kubelet
-  sha256: 34021c6cf593ffc4361e9e2adc3d6e4f5683383eeb894f40d63ccfa268e84f4c
-- name: v1.24.9/bin/linux/arm64/mounter
-  sha256: 6376451d3a6c024e257d0c9fcd4edf55b4f2d6b6267a686eb58acfe9a992dbc2
-- name: v1.24.9/kubernetes-release.spdx
-  sha256: 49ef66faf92849d28294b1adaa6ee04daff7185263b4e0ba91865f95937f60d9
-- name: v1.24.9/kubernetes-source.spdx
-  sha256: 0ec674b543109129f3e59158a260f863020c61b54b29d82755139814fde5dc50
-# kubernetes 1.24.10
-- name: v1.24.10/bin/darwin/amd64/kubectl
-  sha256: 2a0ce88dff23ef2de51c13634e076c8b8ff3e1adfdf78a304a9c30be5824df78
-- name: v1.24.10/bin/darwin/amd64/kubectl-convert
-  sha256: 72b6df3dbcf83018e0b9559517008be7ec80ccecd281aea4986c49fbf6faef27
-- name: v1.24.10/bin/darwin/arm64/kubectl
-  sha256: eaead132882e4c2cbe0d7679f197831d3bdbd4ec5a84b59ad091b228085f6f1e
-- name: v1.24.10/bin/darwin/arm64/kubectl-convert
-  sha256: 7d1ad9a7c287cd6c41be3c1e29d0af683abff774ffd10f889ca43c2c24ee535a
-- name: v1.24.10/bin/linux/386/kubectl
-  sha256: 627a98bb8e32485cc95d100bcfdae3fc795e38662a3d019b299ec01595c21cd7
-- name: v1.24.10/bin/linux/386/kubectl-convert
-  sha256: 786bcd8c9a8cc63210c60d1681021dd8dc15bef99d65304377973235b7f24383
-- name: v1.24.10/bin/linux/amd64/apiextensions-apiserver
-  sha256: 51538b77526d5e036f31af092d401dbea79216473628fce3064f3caf152d34e6
-- name: v1.24.10/bin/linux/amd64/kube-aggregator
-  sha256: 89126799fbc6ce6d23738fb0b072a016a70a76dad77536ecda5eab483afb6448
-- name: v1.24.10/bin/linux/amd64/kube-apiserver
-  sha256: 241d65feb4d403e554cdf9759b4804764f90bc13e9c080dd6dcb457b7b7ffaeb
-- name: v1.24.10/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/amd64/kube-apiserver.tar
-  sha256: 539bd97668b666eac9836f4bfe48d6732ad5e0820ec1e611fbeb2ee54928780d
-- name: v1.24.10/bin/linux/amd64/kube-controller-manager
-  sha256: e99071a454ad18d972c4ed2107dc6772c3fd3fd8f77a70a8856ebb026c27a01e
-- name: v1.24.10/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 1f450f1832a0996df439983e2141985ab0dd4e5baea4d6f61a8d36823df62080
-- name: v1.24.10/bin/linux/amd64/kube-log-runner
-  sha256: 012302d463f010df7ddc30a0535c92e54b2a1c7729544cde97a2971380ad307e
-- name: v1.24.10/bin/linux/amd64/kube-proxy
-  sha256: 0352e7ad1e63e548e85362cc1b676e5b5a62494d8b79b84f14ffb56b069e58e0
-- name: v1.24.10/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/amd64/kube-proxy.tar
-  sha256: 163deeb2643dc5006339822002c67617f8309a17febf091b506f2ee2be560bd4
-- name: v1.24.10/bin/linux/amd64/kube-scheduler
-  sha256: 1670f1f139769913ee80ce6a3fac939742fc4cfb623f56cf93454df80f50127b
-- name: v1.24.10/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/amd64/kube-scheduler.tar
-  sha256: f360455344b929834a030e0c87234305dbbbbe989516bc119e4d5a45cf448f4e
-- name: v1.24.10/bin/linux/amd64/kubeadm
-  sha256: 5e29917dc277a8bc4b90bf9dbed8d3dca903fd7cbf7f12c2e256fe22e9f2a1f9
-- name: v1.24.10/bin/linux/amd64/kubectl
-  sha256: d8e9cd9bb073ff09e2f2a74cf48e94a9b9d4f2fa2e2dd91b68b01f64e7061a3b
-- name: v1.24.10/bin/linux/amd64/kubectl-convert
-  sha256: 36a629fb69862ab8161681e5895dd58ea8fca9cf09f40ecb7d3016c96f162275
-- name: v1.24.10/bin/linux/amd64/kubelet
-  sha256: 34b1731df37d1762662bd91f1cba57a9d2ee86296813c48c4e52a9d7955a1b9e
-- name: v1.24.10/bin/linux/amd64/mounter
-  sha256: 8c05973216e36de8c52fc89ed57d0348aefdd61a6be4ee2e1854269b588bf5cc
-- name: v1.24.10/bin/linux/arm64/apiextensions-apiserver
-  sha256: 7e857736c7fe6ef7c96dfb22ec70a12d03f13c7cd2f491a6a6c65e07ce8d579f
-- name: v1.24.10/bin/linux/arm64/kube-aggregator
-  sha256: 97366f82f69593fc05cd5f0a770e9c14b7ac84bfa5653c9936d2cdda8d395d24
-- name: v1.24.10/bin/linux/arm64/kube-apiserver
-  sha256: 155b76ef8e7655179b036d46f4458893e6e4f686c82628527331070527a1030f
-- name: v1.24.10/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/arm64/kube-apiserver.tar
-  sha256: f433eb14017a428a2dcc3e57a5a179055cef25fa54e2289b9dca61ab590d26cf
-- name: v1.24.10/bin/linux/arm64/kube-controller-manager
-  sha256: 9a0db29d1f37e32343f3d0ea900b1e228d6ad8606dd8deb28613fb0987bd474f
-- name: v1.24.10/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 8c724930958e7cdc4d384e4a166945f925795116ed3cb7a6a7d331171d456850
-- name: v1.24.10/bin/linux/arm64/kube-log-runner
-  sha256: f8f3f198c645e40f9d7d12f31724001d4673ec86bb5846149ce1b6cf45de7b94
-- name: v1.24.10/bin/linux/arm64/kube-proxy
-  sha256: 27f50d92f8b272d55a57f1684cdd3f97271032c924e44c372b5346dd69d180a4
-- name: v1.24.10/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/arm64/kube-proxy.tar
-  sha256: 53d918aab7e5ac1a7043826e82109c98663e37797ef0ff0a80044684e7f81f33
-- name: v1.24.10/bin/linux/arm64/kube-scheduler
-  sha256: 80f9574857de438cb7723d76b90edc555c6e0ebd164733a83a6f7af14ad7a810
-- name: v1.24.10/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 49c159bc64a8b082826255a86c5df847905e458af5733d7d8ab98b4654653c2a
-- name: v1.24.10/bin/linux/arm64/kube-scheduler.tar
-  sha256: 3333e5efc15e2ca0083c2a1577a33f24383d5d8bb8c52ed70fdfcf1696c9c817
-- name: v1.24.10/bin/linux/arm64/kubeadm
-  sha256: dfa768a684ee9854da4aee0a39164c0ce2e07156a0f0d284d9153c5eb14584b2
-- name: v1.24.10/bin/linux/arm64/kubectl
-  sha256: 3a0fa419264b3df077bc8220d721d6cbef6cc944014d9337adfd4434ac23bebf
-- name: v1.24.10/bin/linux/arm64/kubectl-convert
-  sha256: b8efbab164610be5a6de9e7d293b10068f8a38e544ac79a3c2077d575d778d4b
-- name: v1.24.10/bin/linux/arm64/kubelet
-  sha256: e4f5f6d864dfcbe5e5773039f4c44b026a1fa8626f459c82c00e8a4d85bbc089
-- name: v1.24.10/bin/linux/arm64/mounter
-  sha256: 291c331b8adf539649dfebfb5461013f7dd960c7f3c235f8652be2a3a5f245b5
-- name: v1.24.10/kubernetes-release.spdx
-  sha256: 4f7fd3faac8fdbd509a6be9e3cd28537c591f3aa847a7d1dec87c1606beb89ac
-- name: v1.24.10/kubernetes-source.spdx
-  sha256: 35e8675b9404090de8d267af9dad755edd120465bf8d915283042cbdccab81a5
-# kubernetes 1.24.11
-- name: v1.24.11/bin/darwin/amd64/kubectl
-  sha256: 323926e73d685f6e84a81ca32db2347e1aa50a3c6489807dcdce1ecf496a38b4
-- name: v1.24.11/bin/darwin/amd64/kubectl-convert
-  sha256: b2630bdd063dd6077bceabeeae42b72bae40ca663605a671decb4361b4129844
-- name: v1.24.11/bin/darwin/arm64/kubectl
-  sha256: a4d5c39aeec83a0e17a69b84252f32882bc8004c4d7097fa926cc46ed97ab288
-- name: v1.24.11/bin/darwin/arm64/kubectl-convert
-  sha256: 0d087d88c3abe4ba845ce8660ff6c72bbf6f4b5715aabba8a481c68fca9e8091
-- name: v1.24.11/bin/linux/386/kubectl
-  sha256: 69d356f42de3c452ce874f555811e4409d422780ee76ab26e6da0cad18140ad7
-- name: v1.24.11/bin/linux/386/kubectl-convert
-  sha256: a1aa2cbb69ceff06c266e356a5457cf9eb3403ce0f314958d24923908f20e206
-- name: v1.24.11/bin/linux/amd64/apiextensions-apiserver
-  sha256: 4b894912ee5ef763af5a57d206e2c5bce01fee02e1f71f032bf85155e55e2657
-- name: v1.24.11/bin/linux/amd64/kube-aggregator
-  sha256: 6463490ce59c2972c09a2d17aba0c93ece41173c52194c351abcad8858b7f9f0
-- name: v1.24.11/bin/linux/amd64/kube-apiserver
-  sha256: 5942158c6a381e7c29e170527ae47132f150f279684df3acc1b2566688565a6d
-- name: v1.24.11/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/amd64/kube-apiserver.tar
-  sha256: 6f91327ca0c6add26b8a1724d3bdddfca97a8affd14ea2182af01cc2e7de4943
-- name: v1.24.11/bin/linux/amd64/kube-controller-manager
-  sha256: bace865028111d82a6caafdda910cdf0063a74af662ae035906a7d3c415cd7d5
-- name: v1.24.11/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 6ede08b18b937bea2bc02ff12fcce0cb3cd6f30e6123410d7283ff7c0fb46365
-- name: v1.24.11/bin/linux/amd64/kube-log-runner
-  sha256: e4c4ad84e6453555508b40debc33262324221aee1d15c8b99e7d98d5a308f557
-- name: v1.24.11/bin/linux/amd64/kube-proxy
-  sha256: 1d89cea728433cdbcbb2e9d28f4e191adea2a1dab1db806a5f8d4bbd2c31c446
-- name: v1.24.11/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/amd64/kube-proxy.tar
-  sha256: 66546f745aaad2f2dfef976c06bd7f074756c323d9f94f09874ddad878d01685
-- name: v1.24.11/bin/linux/amd64/kube-scheduler
-  sha256: ada8b5153abb7f1b91c737d57bd0f530b3c760022a9d77954b7457036d8c44af
-- name: v1.24.11/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/amd64/kube-scheduler.tar
-  sha256: 114036590ab30d80c10a0158354e94e133aa15a53e6f2a71b538264723c24bc3
-- name: v1.24.11/bin/linux/amd64/kubeadm
-  sha256: 9123cdda3118772794198f784e4f39f34212ebaa919bdddaf611190d7c4abf38
-- name: v1.24.11/bin/linux/amd64/kubectl
-  sha256: c8bdf1b12d5ac91d163c07e61b9527ef718bec6a00f4fd4cf071591218f59be5
-- name: v1.24.11/bin/linux/amd64/kubectl-convert
-  sha256: 44bd01315f251c6fe22d3c08d2280381e9d95a9cf638ff904c44689b3aca87a0
-- name: v1.24.11/bin/linux/amd64/kubelet
-  sha256: 1d4849fa3aee4847b8ccecc7e14b16caeb0d507a20d0250cf57e71155248f74f
-- name: v1.24.11/bin/linux/amd64/mounter
-  sha256: 6cddaabee7d5f2c170b2c07b81192c64179e637d1636907d717fbc306db7e966
-- name: v1.24.11/bin/linux/arm64/apiextensions-apiserver
-  sha256: 7ed8b4b024f7d9b2a89501ac6f08a8a25ae4deab65aa924dab3f50552098a012
-- name: v1.24.11/bin/linux/arm64/kube-aggregator
-  sha256: 068cf676d476a5800c7625a9bb467dad6d6c2d6b42cf3a4328b6cbf31e3f58c6
-- name: v1.24.11/bin/linux/arm64/kube-apiserver
-  sha256: cd6e18daa392f02007159ae0024843acd485554438d05ac0e400208a7a1c7aee
-- name: v1.24.11/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/arm64/kube-apiserver.tar
-  sha256: 69db1a28cf6226adb8b1c0a1e0d92b1008050fe8f918ef68b490a82ad659d7d1
-- name: v1.24.11/bin/linux/arm64/kube-controller-manager
-  sha256: ef564586dc95d89b21bae2038813ec9627d29defb3b950bbc16fe61943e4e9c6
-- name: v1.24.11/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 01c16af371c3138b7dd8cb81c7ba267f132a1afa760e5bb8d95d2266577156e0
-- name: v1.24.11/bin/linux/arm64/kube-log-runner
-  sha256: 93394a4ac8989762516e1feae1ec9e35a9122cdb22a7defade9004cbbd5fed4f
-- name: v1.24.11/bin/linux/arm64/kube-proxy
-  sha256: f656e8e812c60164370571572dcce4cede33f33f3b7c64c7197f2bda36f001b4
-- name: v1.24.11/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/arm64/kube-proxy.tar
-  sha256: ffff296afaeb36be222b9d90d6ddb0510bb73bdce2497f52c5d123fa76e2a0e2
-- name: v1.24.11/bin/linux/arm64/kube-scheduler
-  sha256: 40c8c1a90a8561e53ea2b40730c7db63c0e08920451dc088ba2060c23fa2259f
-- name: v1.24.11/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 23287961e9ab4a971338bfb4a7a23744aba9e8bbd4645ae1d9185483f0ed0988
-- name: v1.24.11/bin/linux/arm64/kube-scheduler.tar
-  sha256: bd2b86e51a84998683451f55afadd7c3c0fde4d34c8e73a44a25a6e713fbfab9
-- name: v1.24.11/bin/linux/arm64/kubeadm
-  sha256: 3986f6a48af8f6d2c1cdba1e60e347077e6d1882df984f422b7d1d77eb82005e
-- name: v1.24.11/bin/linux/arm64/kubectl
-  sha256: b333f110a0408448b8ba18aa41ca40571056c78e496762ee8084e741b685e206
-- name: v1.24.11/bin/linux/arm64/kubectl-convert
-  sha256: 18a20229e4498a53296262300457fb36391b4eef17877b846c8451faf63ddb75
-- name: v1.24.11/bin/linux/arm64/kubelet
-  sha256: 43a535958b7b9d8da5600208064eb3f799d9069ced6d836a79d24dd87525f66f
-- name: v1.24.11/bin/linux/arm64/mounter
-  sha256: ba47cfc5eb296b79711bdefb45289bb3332f4a1aa7f55f96be73806e18450183
-- name: v1.24.11/kubernetes-release.spdx
-  sha256: a715134781c3a67358add2925f862d690ea0134ffe35809bec1e4703ca21e36b
-- name: v1.24.11/kubernetes-source.spdx
-  sha256: 896ddf7bd0cdea99eb8d5c307bda4c3f6a5ff9be6b5ae3393bc798ff29ac606d
-# kubernetes 1.24.12
-- name: v1.24.12/bin/darwin/amd64/kubectl
-  sha256: 73eeb3dba7221c823a4d1b1bba29d2f67df989c12f8eafe593402b1fc9612098
-- name: v1.24.12/bin/darwin/amd64/kubectl-convert
-  sha256: b2e45320314eece14ad7948d8872de4fbfc3104d0c0e25c4db81cbbd3cf55b3a
-- name: v1.24.12/bin/darwin/arm64/kubectl
-  sha256: a8558a98dbfda72051903ab425d5572d560b231c166fc87da35266e7a0d74d9c
-- name: v1.24.12/bin/darwin/arm64/kubectl-convert
-  sha256: 862ff63c11051fbb1a95575bfc36727b638eb8fd86d489115cf5dacb8b5b006e
-- name: v1.24.12/bin/linux/386/kubectl
-  sha256: 3a265bc721b35c61537281acfdcc56335b30290e2c02dabdb5bd99b7cf1d948c
-- name: v1.24.12/bin/linux/386/kubectl-convert
-  sha256: dee2b07a563e517e3af7e61c936d078007d901f4a7adefe5f60f743d332fa963
-- name: v1.24.12/bin/linux/amd64/apiextensions-apiserver
-  sha256: c5f054928bc7f41af1038fdd3112655b372d25abcfa5cb883d3c7b2802d43b34
-- name: v1.24.12/bin/linux/amd64/kube-aggregator
-  sha256: 7feacc1de076c0344e433656316f2d24bc4d7f505968cb55583d813c8a1ccbba
-- name: v1.24.12/bin/linux/amd64/kube-apiserver
-  sha256: 7ba89eb704507a38cda8af2ccb75a2b81f1528e72515ad4d9da23f06a575ab4a
-- name: v1.24.12/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/amd64/kube-apiserver.tar
-  sha256: 39c59a4159f35892fd6dbca92f84624b7e28b1d3fe8a95315a2476998d704625
-- name: v1.24.12/bin/linux/amd64/kube-controller-manager
-  sha256: 2e9838aa650f176f5e0692302ac56069a110f005c953c808a08bd513430b71d2
-- name: v1.24.12/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 591de0efb41956ea26cc38e990f31f088f0c98629d60ad810c9dfc37f1b7e22b
-- name: v1.24.12/bin/linux/amd64/kube-log-runner
-  sha256: 1708ecd80fd2401386bee423d99bbc494befb9ef7a15bee0e11aaa9305dc8e86
-- name: v1.24.12/bin/linux/amd64/kube-proxy
-  sha256: a0691afe314ec4fd8e411bb44689e68e7482b63ebbe3b38d9e07cab7a780e6f5
-- name: v1.24.12/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/amd64/kube-proxy.tar
-  sha256: 0884347d7b1ee0ec28a77140712c64c0c81ad608ebc7a75fdb4d99a8dd97c779
-- name: v1.24.12/bin/linux/amd64/kube-scheduler
-  sha256: f0f0197fc960f0b25dc8c519478d1c7497f8f16b37576ac7744897a50ce9e265
-- name: v1.24.12/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/amd64/kube-scheduler.tar
-  sha256: 2ccdbca42bf041956f91f881a316f04eea7a1587a72ffb892efa611b02c60704
-- name: v1.24.12/bin/linux/amd64/kubeadm
-  sha256: a6daad39597a9d3d4c49a44ce2b77bb45290855085cbfe2e1b20afd84f40d143
-- name: v1.24.12/bin/linux/amd64/kubectl
-  sha256: 25875551d4242339bcc8cef0c18f0a0f631ea621f6fab1190a5aaab466634e7c
-- name: v1.24.12/bin/linux/amd64/kubectl-convert
-  sha256: 15b8c8e1ed0a97096d766cef0e6cd005b0af8a034be31e8d1cbbd0bcea1793ee
-- name: v1.24.12/bin/linux/amd64/kubelet
-  sha256: 3105c4165cd4efea154046cac27ca087b10098c1793148fe2797b631e2897a2e
-- name: v1.24.12/bin/linux/amd64/mounter
-  sha256: a4064ee4a4f59eb647932dbe6ebf81857bcbc03a6eec67dae65ac96bc54247bc
-- name: v1.24.12/bin/linux/arm64/apiextensions-apiserver
-  sha256: 0c3688bab50ca679d67a37ad24d63a636b277c2f3bee493dceb72be0f9d98b3b
-- name: v1.24.12/bin/linux/arm64/kube-aggregator
-  sha256: bab3ac88dc45c622ad73536ea6f0a81b4f2a6949813380a56c97dff89d956057
-- name: v1.24.12/bin/linux/arm64/kube-apiserver
-  sha256: 5ed3e7d2c081d3f04ca0f242d0f6db607e408a80012961c906bdd1f58180bafc
-- name: v1.24.12/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/arm64/kube-apiserver.tar
-  sha256: dd6b7f3767af843fe80bd0767eb70d68011496d644882fc1ff66fa13d4fcc507
-- name: v1.24.12/bin/linux/arm64/kube-controller-manager
-  sha256: 03aed7cbf9eda4e1c31cfc4cde03c737d66f8ff3213da5c10b378fce59837b17
-- name: v1.24.12/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 898ffae29a0c96ff26e47dbb41bba9155588906f8c68a3e34340da04a8183c27
-- name: v1.24.12/bin/linux/arm64/kube-log-runner
-  sha256: 04508032465b1c50c0bdb30201a68a5481ad5b51dc2063d4ea9352aef8276fe2
-- name: v1.24.12/bin/linux/arm64/kube-proxy
-  sha256: f6e2cc328537fd4a15e7b7e9209124d911cb54b243071311e5deb8f038828f6f
-- name: v1.24.12/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/arm64/kube-proxy.tar
-  sha256: 8781893f0c6bff95eb4b6182eb3351281b5661e2c2f6ca4e958d7ec9750b0f92
-- name: v1.24.12/bin/linux/arm64/kube-scheduler
-  sha256: abe0c992627ee7197abb7d123d5df1232b65c78dd311bba5301fa56d5ed79ceb
-- name: v1.24.12/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 504add00dfd7a4f4e71b5c722ff7495c0bbb14c0667e8e59837ab9c15dbbb8e4
-- name: v1.24.12/bin/linux/arm64/kube-scheduler.tar
-  sha256: 3b1cd06169549ea343e56b2d7906fb146fd23b49358821afad9a052169f658c0
-- name: v1.24.12/bin/linux/arm64/kubeadm
-  sha256: e3f7864b3b98c8cf1a3284911b20393f4b1fc5f9a4524ae7233258a7f9fbb1e9
-- name: v1.24.12/bin/linux/arm64/kubectl
-  sha256: a945095ceabc2b6f943c8c7c8484925b1b205738231fe7d34368a3e77dfe319b
-- name: v1.24.12/bin/linux/arm64/kubectl-convert
-  sha256: 3bf1205ec4fc6458f34eeb8d23f280f173b58d324281c5324aae419ad788374c
-- name: v1.24.12/bin/linux/arm64/kubelet
-  sha256: b4116fb92694d75afd2ac3be742fe3c020470e53546cfacc73eb8a4e33cfcab1
-- name: v1.24.12/bin/linux/arm64/mounter
-  sha256: ad7850f67702f6399d28b0cc505c58ef9d2145fa4693801b8ca2d9b7e52cbd7b
-- name: v1.24.12/kubernetes-release.spdx
-  sha256: fc3c9634f478ea3898875effe197e26ac0134b4cecf6e5a353c40af64a3a77d8
-- name: v1.24.12/kubernetes-source.spdx
-  sha256: c2f8aed5eed8c58650b592127c0b0ca37c1ef5bb852e375119f9c07db77a2e74
-# kubernetes 1.24.13
-- name: v1.24.13/bin/darwin/amd64/kubectl
-  sha256: eb0dbc5e55c604b42b19d51609cb2e52e6da9bcde879cdb07d20d74da061be08
-- name: v1.24.13/bin/darwin/amd64/kubectl-convert
-  sha256: 87e455677b6980b577e44272ce72f8fc3ce6dd5e3370595e2761a0767514adf0
-- name: v1.24.13/bin/darwin/arm64/kubectl
-  sha256: a0b30642de4e0c290e08f1895d7a0951a004f23d107bef86a6460c5f5b516585
-- name: v1.24.13/bin/darwin/arm64/kubectl-convert
-  sha256: e59014c6791f6882472871183c5978c191916bdf37397593059366c47e1bc473
-- name: v1.24.13/bin/linux/386/kubectl
-  sha256: ea3314a36656d39767e040d0a658270e3c1dd91d896f15d331302c11ffa8c5d6
-- name: v1.24.13/bin/linux/386/kubectl-convert
-  sha256: a24e2d18a9c9c7fe722c1f917bb636d374fe1c1014ef58f349dab33229ceffe9
-- name: v1.24.13/bin/linux/amd64/apiextensions-apiserver
-  sha256: 8d2f07da2ff0afa89ff01cd375f0fa566596c01f443c411cc80456bf14de81ca
-- name: v1.24.13/bin/linux/amd64/kube-aggregator
-  sha256: 204551ffe631e40c4e5205cd79302b15fae9ad108a5dd4a308056786938ab8ad
-- name: v1.24.13/bin/linux/amd64/kube-apiserver
-  sha256: b93d6b10faaf134f1cbf5b8e9848f61509170931bfd4e1f90f466d5f597e6314
-- name: v1.24.13/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/amd64/kube-apiserver.tar
-  sha256: 830f45cd4f6cb18a5e34e8e306bdadd40ffcac54ca0257dc505460f894763c48
-- name: v1.24.13/bin/linux/amd64/kube-controller-manager
-  sha256: a70132d1303b35c114d99c6e879752337d6f0b9eaf2fc35de9d19222bf244571
-- name: v1.24.13/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 44e5dd7f36f0c390427b324c5a493d4630c4afd77d78002aafd897f33de2404c
-- name: v1.24.13/bin/linux/amd64/kube-log-runner
-  sha256: 49d41236a093024e0124eef05cda86211355ae9bc450e2c24e87c1b11e3dcd2d
-- name: v1.24.13/bin/linux/amd64/kube-proxy
-  sha256: d811cb01eff94398bd443b58ed32382f65aa4ec6cc8a5a78c55ba04d9dca2032
-- name: v1.24.13/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/amd64/kube-proxy.tar
-  sha256: c06dbde586477ebdebcfc38f41f27778029a35b4f33a11e1dfc06a8bac0a6a57
-- name: v1.24.13/bin/linux/amd64/kube-scheduler
-  sha256: 1daba7b0f00fc6d2458d5303862c0bada2d9f00b199e5d072c6c152802cad5c8
-- name: v1.24.13/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/amd64/kube-scheduler.tar
-  sha256: d628b3fc1e85cd19ba9d55c6145c7d2bba136f903a0eb1c564d9a59a7ea9e30b
-- name: v1.24.13/bin/linux/amd64/kubeadm
-  sha256: 91a65b7415a1a7e3dbdb23683eff9e2ace5a725a1bcd52b10695dd49adb6787e
-- name: v1.24.13/bin/linux/amd64/kubectl
-  sha256: 52455fe485fa11c650ab07fea2e4856b5ea5a3e6ef8a1b3b6121e6361437fff9
-- name: v1.24.13/bin/linux/amd64/kubectl-convert
-  sha256: aa61c1210e5cf064deca9a8721b74a3028a51dc21bc291af66b1fb2f91dc185f
-- name: v1.24.13/bin/linux/amd64/kubelet
-  sha256: 78cdc9b460c997babc5c8d4f45fc93c7c037df94b7004ecacaa856500ed616a6
-- name: v1.24.13/bin/linux/amd64/mounter
-  sha256: 4a403d4388b257fc754f8c74bd07bb126999ddabcac9a1b533ccf7f0017fa548
-- name: v1.24.13/bin/linux/arm64/apiextensions-apiserver
-  sha256: 75e7fd17ffdd1be71b83c075ebd8c909bbf58a060a75fee0e8c95fb2e0ddb606
-- name: v1.24.13/bin/linux/arm64/kube-aggregator
-  sha256: bfb6a8602a8b93c078eb9e0c7d8ab4acf9ada5b976435c40846daa68d090c20b
-- name: v1.24.13/bin/linux/arm64/kube-apiserver
-  sha256: f80e432095f8bb9492d62ec9c05ab7f0f2efa911a00ff22f9aa6c4dbd3370aba
-- name: v1.24.13/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/arm64/kube-apiserver.tar
-  sha256: 1762c0a5687b6b511bf1a13684efd871abcc1592adf49690d929c6fab4ca36cc
-- name: v1.24.13/bin/linux/arm64/kube-controller-manager
-  sha256: ef752f763792f0dbaf52bde614edd73e8e5d5348e63ca23846166168a5108308
-- name: v1.24.13/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 5925811b2a5b52514db0ab43c25a71678b8895b9290c2cc434e877c1f9e7d3f0
-- name: v1.24.13/bin/linux/arm64/kube-log-runner
-  sha256: 9dadd76c8ec7a817ffbaea34eeacf9919234b7a6f1d574fbce5395e14ec230b8
-- name: v1.24.13/bin/linux/arm64/kube-proxy
-  sha256: 781c3ee00209d9fa3d00bf40cccdbe20b845c01c014c9cdaff9aae486896432b
-- name: v1.24.13/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/arm64/kube-proxy.tar
-  sha256: 4e0ec6ce72045652b6699ab21136faa61a92c97222c902b7a171d9140eb072ad
-- name: v1.24.13/bin/linux/arm64/kube-scheduler
-  sha256: 8f68fa93d3276a12b5b3684956e7367f46530acba6b51e0817045f3043004d1a
-- name: v1.24.13/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 6a6a487443af87c05f1acf2abbed1b6f5e8c778ee0d0f642ca309f2085e31720
-- name: v1.24.13/bin/linux/arm64/kube-scheduler.tar
-  sha256: a3bc4565fd155712147f9f5ffffb19e8feab60dcfc22187ba42146f21c0c687b
-- name: v1.24.13/bin/linux/arm64/kubeadm
-  sha256: c3b8d75bd6bed4d34786ba95d31198a967059166b1c929222a7bef238b08d829
-- name: v1.24.13/bin/linux/arm64/kubectl
-  sha256: 750a2ee55b835994cda5f262bfa18debdcdb0d7a450875dca4f83c7cfffda353
-- name: v1.24.13/bin/linux/arm64/kubectl-convert
-  sha256: 3d10f7bf89b4e4c89836fbdadfdb181c94c7976990db4dd6043ca5ca67515251
-- name: v1.24.13/bin/linux/arm64/kubelet
-  sha256: 4449135fb486c275ebf928ad0873c391297a1d78bd871163f37920bc41d1d171
-- name: v1.24.13/bin/linux/arm64/mounter
-  sha256: 043e7d1ff4e579ae931e4903c901941300a4ee182984629223a6145ef2fb1c89
-- name: v1.24.13/kubernetes-release.spdx
-  sha256: 36c4e02a7fd83587b6693d3aaaee434fd9153f2f7048ed33c3b5000fd340b3c3
-- name: v1.24.13/kubernetes-source.spdx
-  sha256: cc7b48cbfe349b91cb71c5f5e1a7c5d2ee7110bd534a41ed29adcf08dd7282ac
-# kubernetes 1.24.14
-- name: v1.24.14/bin/darwin/amd64/kubectl
-  sha256: 57ac9df739895279bdd50e0f47bec7d5a6b3793b873e82cb4b593b68b2928ac5
-- name: v1.24.14/bin/darwin/amd64/kubectl-convert
-  sha256: 7509a8b458a91e97a1258dea668df51fc00e615684a94905d41e8b9d31de21e1
-- name: v1.24.14/bin/darwin/arm64/kubectl
-  sha256: 6d01494d01f878f26160387cc1b8dc19fa2c6970c4efab74ebdf84269913a6de
-- name: v1.24.14/bin/darwin/arm64/kubectl-convert
-  sha256: fa189f9d94c01616e221b1d372eb93b5d0903e828808a43c1146f7a3b9c2837c
-- name: v1.24.14/bin/linux/386/kubectl
-  sha256: bbde34d6a8ecf4c8afcb22860caba1bb8e732eb20d9ff512377f8657ecd713f3
-- name: v1.24.14/bin/linux/386/kubectl-convert
-  sha256: d1211bb9b8cd28aba21a0497bdb1d85b89348d7c6c8dce79cbc34e8f6768997a
-- name: v1.24.14/bin/linux/amd64/apiextensions-apiserver
-  sha256: 43ef32a3f44f9e57446af89c37a1405d336eb5e8daf9ee0817136997e3d114db
-- name: v1.24.14/bin/linux/amd64/kube-aggregator
-  sha256: ec8696e206fcd1b97f1aeeed0fb7cbb71257efab05f3059dd6452900348a92fe
-- name: v1.24.14/bin/linux/amd64/kube-apiserver
-  sha256: b66e1a345f6919c4debf11a5754559f2769e4bfd7a77e70b0dd6e42238da658f
-- name: v1.24.14/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/amd64/kube-apiserver.tar
-  sha256: 3b10207913a36e523b8e89a76756f2a3794059ff943abf9674f357a3351b5b04
-- name: v1.24.14/bin/linux/amd64/kube-controller-manager
-  sha256: 021e275e677f253f7ad6be4e709d6fa1819a89eebbfd37fdb0dfdbb3c71b88ab
-- name: v1.24.14/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/amd64/kube-controller-manager.tar
-  sha256: ec1254a81f6fbe59eb9d6ab1996c433dd1b105ed995b07f5b52f3443df06e8ab
-- name: v1.24.14/bin/linux/amd64/kube-log-runner
-  sha256: 71da6c553e6f8810749aaa3c62d139e57c1730bc196bd1a1aa37e08de94e1864
-- name: v1.24.14/bin/linux/amd64/kube-proxy
-  sha256: f41abbbba952367b3507b6e8c80da508ebc824afa81aea44fce0a2e7bf7528a2
-- name: v1.24.14/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/amd64/kube-proxy.tar
-  sha256: 91bb462efdf7500d153940bbc68b246a2a6a2f4c1f353bdd0c59effc9696274d
-- name: v1.24.14/bin/linux/amd64/kube-scheduler
-  sha256: 93e3e5e501bbbfbb89e07ed071462d825aa3ea8a85d3df93aaaf959ee5ac72e1
-- name: v1.24.14/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/amd64/kube-scheduler.tar
-  sha256: 97fdd6761cf95ff24679d0132656133f9fa6f09acf126efa8b842c796ebb6937
-- name: v1.24.14/bin/linux/amd64/kubeadm
-  sha256: 5de81e7fa23e513411c43ca2e59fe6c64848c7a7108472a7a7931f867e28d223
-- name: v1.24.14/bin/linux/amd64/kubectl
-  sha256: 3ef141cb84803fbdcea7db270e9d6678ba064c2c9f2eccce91adedf09daba706
-- name: v1.24.14/bin/linux/amd64/kubectl-convert
-  sha256: e2163bc8a5b55144d7a939db6c83ae61fb94776e570711d019192c8c948ab184
-- name: v1.24.14/bin/linux/amd64/kubelet
-  sha256: bcfa6c3c38dfc9467ac88a5eb14527571fc01f1114da56c204bda082560b4706
-- name: v1.24.14/bin/linux/amd64/mounter
-  sha256: a9f172d27267ada0d640dc7c06163547e419932119aed8ad1e3a377aeae423cf
-- name: v1.24.14/bin/linux/arm64/apiextensions-apiserver
-  sha256: a9abbf95c56d3e720a300c1e9b661615985c0ae0a1aafdc5ab3c016642b9d401
-- name: v1.24.14/bin/linux/arm64/kube-aggregator
-  sha256: e60e0b0799c117ccbdfdeebe91dd3e7f35ebb6b2910dafb8a549f89e1b91d2a2
-- name: v1.24.14/bin/linux/arm64/kube-apiserver
-  sha256: 13fc6febd63e006328fc6269d7b0ddd3169f72e9bb8324ef5e1e5a7c6f15fd11
-- name: v1.24.14/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/arm64/kube-apiserver.tar
-  sha256: c5f5ccc0e2ea39a7d35786a88f682f18551b2cec370e0fc2a2c29f0d75867145
-- name: v1.24.14/bin/linux/arm64/kube-controller-manager
-  sha256: e113de43f888849653b3e0febcce7d39b0d9534702a9078c7d2b44bf6af0c077
-- name: v1.24.14/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/arm64/kube-controller-manager.tar
-  sha256: a7fd82acd3dbe52a695978fa7c2f9567d3270ef92eeb2ad5619ac4ef62aebbe6
-- name: v1.24.14/bin/linux/arm64/kube-log-runner
-  sha256: 14183a782a6955a57a4406205d971071beebd289342032deaf9ebf6d6cf463c7
-- name: v1.24.14/bin/linux/arm64/kube-proxy
-  sha256: 5dbfde55f030b1b6acdc2e35440ca5e36059058beda31e3764ca3bf54de40c4a
-- name: v1.24.14/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/arm64/kube-proxy.tar
-  sha256: 8e5cae68d7ed8247bfcfd80b5f8336fee77eb76e817325fc62cbaf02e1991c04
-- name: v1.24.14/bin/linux/arm64/kube-scheduler
-  sha256: ad436749e2c0e76c0e2109c51b600ef119c07dbbcf9d09a953db097447f569b3
-- name: v1.24.14/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 3eb5f793e8f136c71cab95bef88be12c0270e173aab7d9572afe3bff5d7350da
-- name: v1.24.14/bin/linux/arm64/kube-scheduler.tar
-  sha256: cf819d1ee9cc7e8387478d90f7aba1f5fc67f334f46a6e3ffce849284ceae576
-- name: v1.24.14/bin/linux/arm64/kubeadm
-  sha256: 953ede1b5aad5433545b715777da9aacc88318fbda34e0e0027ee5d7fb6b7c67
-- name: v1.24.14/bin/linux/arm64/kubectl
-  sha256: df2859e4cb868926591d93c49e185048c8ed3db026d32f817367c7f8db6914f9
-- name: v1.24.14/bin/linux/arm64/kubectl-convert
-  sha256: 32774ee4d316545ccc34fce5cb084c0d3d8258d8abb65cc085e3d48c0c06cd5d
-- name: v1.24.14/bin/linux/arm64/kubelet
-  sha256: 421665d86cbebde3a5e1a58463ac23ab2874aa42a9a8d8e1ca2cadfca9de5384
-- name: v1.24.14/bin/linux/arm64/mounter
-  sha256: 3f35d0b2b550d2093223a483aecdb7d09298c4d49727df245595aa0fa83ecfc6
-- name: v1.24.14/kubernetes-release.spdx
-  sha256: d2c47f4dd47c3758e68d3aec79483be7dcf97f3a08b4180f0c5ac4be4a982d86
-- name: v1.24.14/kubernetes-source.spdx
-  sha256: cb96566c3cfe25697ebba46c60980fa0e693a983d942abc95ce9b65779147dd3
-# kubernetes 1.24.15
-- name: v1.24.15/bin/darwin/amd64/kubectl
-  sha256: 2ef8149ee28eacef9fc59c0f38d31d680f4bfb850e92b53572dc06690bc0989e
-- name: v1.24.15/bin/darwin/amd64/kubectl-convert
-  sha256: a86df12fb933f794bb361c225ae1e0c5cc0a2ef769649abf736ee0638d6cec46
-- name: v1.24.15/bin/darwin/arm64/kubectl
-  sha256: e9e51d926d7e65021a020317ee7ee609226c7aa6a24a5084e0811052f4c7fcf4
-- name: v1.24.15/bin/darwin/arm64/kubectl-convert
-  sha256: 2ae0f9b8b00a18ae03584a0439752a2723b68844f2d977205790c88424747352
-- name: v1.24.15/bin/linux/386/kubectl
-  sha256: 868d44809ff4fa0fd4f18878512b97b9eb33898a3f121420d1bdca3936dc998c
-- name: v1.24.15/bin/linux/386/kubectl-convert
-  sha256: 0f4e6ce5bcd2e34d36cabd0dc93a85e32fb989c92f90f84b62f4c630ef590d9e
-- name: v1.24.15/bin/linux/amd64/apiextensions-apiserver
-  sha256: 644593c9ebed7cb4b948f5cdf4b09360c9733b6f06bbb7c1e7064e9ed5977eda
-- name: v1.24.15/bin/linux/amd64/kube-aggregator
-  sha256: 45eb117ef5f88a6c8866be57b44d67d92e7a190371799df2b36c18607a17a81c
-- name: v1.24.15/bin/linux/amd64/kube-apiserver
-  sha256: abfc56605b06ed258e669221c65442e7d57b1b7170cc58a44d9dd630ac7f5d64
-- name: v1.24.15/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/amd64/kube-apiserver.tar
-  sha256: f1dcbe2baabeacf64be4c867bc09c9ef2c7dbedaa0fa583d2001df2925ae0032
-- name: v1.24.15/bin/linux/amd64/kube-controller-manager
-  sha256: d76d690978b47f1607837eb82b62ccaf5377e2af4604502397ddc05ee4bc3ec0
-- name: v1.24.15/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/amd64/kube-controller-manager.tar
-  sha256: a688faaf6cfae9729fb24509dd5eb54fcc8710d0e5a82a439336558ffee1000c
-- name: v1.24.15/bin/linux/amd64/kube-log-runner
-  sha256: 7dc71f94656c6a461532e7523ac2b1af9b0ac238292bd136c54d73706adffa34
-- name: v1.24.15/bin/linux/amd64/kube-proxy
-  sha256: d49ae438bd7ca1eab6e908beab1e87166f9ae6031fabde480128c155471c6d99
-- name: v1.24.15/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/amd64/kube-proxy.tar
-  sha256: 6781885d2cd1813db6527f3416fc92c5ba247337d2bb775bf607136132beb77d
-- name: v1.24.15/bin/linux/amd64/kube-scheduler
-  sha256: dc8451f38ef834add9cb7362619c979cb8dfedd6c247548166fc67c822d8fd62
-- name: v1.24.15/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/amd64/kube-scheduler.tar
-  sha256: cb9d1415ef70ce0b9fdcc0bf727a1b558cd5af3912f9f64c9bf47b70987ed92d
-- name: v1.24.15/bin/linux/amd64/kubeadm
-  sha256: 0f4838139affb7b1a131d5d0a0b93d4ada0d1d22da5d04d5d3599018adc130b7
-- name: v1.24.15/bin/linux/amd64/kubectl
-  sha256: a45d390e17d1cd4bf93eaa733ebc87ed1a38fd867316919bdc59bee9f96e4d8e
-- name: v1.24.15/bin/linux/amd64/kubectl-convert
-  sha256: fc4c1238c2a909c125d16d7f3ed0cf8b1fc7c4a6f59ea97dc05da237ff9f5468
-- name: v1.24.15/bin/linux/amd64/kubelet
-  sha256: 577bb7424eb83b4ddedc920f4e719283cf28a8468e412c2003372c138090358f
-- name: v1.24.15/bin/linux/amd64/mounter
-  sha256: 9a2e40fec457d1599e7608decea8da1c0893bb020c56b62ec0ad952efeaec343
-- name: v1.24.15/bin/linux/arm64/apiextensions-apiserver
-  sha256: bebb6a122da5b39376f464a4e09e3e12d0bf4c83fbfd05ace84085fb37e1eba2
-- name: v1.24.15/bin/linux/arm64/kube-aggregator
-  sha256: ba38cedd38957e5b770d2893f7c308aea20d73d03984846945249b66e103a2fe
-- name: v1.24.15/bin/linux/arm64/kube-apiserver
-  sha256: ab6025c3a3261e8c614c7520b32436405717bfd3c9c5a6c010a2ddca93a43385
-- name: v1.24.15/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/arm64/kube-apiserver.tar
-  sha256: 02023b82d2d0b4a7dd16ab6f257caaafa82ca2ee4f338a32b21b134011ff090a
-- name: v1.24.15/bin/linux/arm64/kube-controller-manager
-  sha256: 76076e98bbb383c89f6672afce03f9f4a64e4aff3900237bf4592a7eafdc810c
-- name: v1.24.15/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/arm64/kube-controller-manager.tar
-  sha256: bdb900f85e14873927e42e8cf7277d41a78d76621adcab6e54c4794257ce9cfa
-- name: v1.24.15/bin/linux/arm64/kube-log-runner
-  sha256: fe2ca127d418e5e3abb888988212848745f2e4014be87598b1244fe8cc5b77bb
-- name: v1.24.15/bin/linux/arm64/kube-proxy
-  sha256: 309842f421bd7ab9d6699b775eeb38815617099c2b67e023b700278089adae67
-- name: v1.24.15/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/arm64/kube-proxy.tar
-  sha256: a96d01958de52a711311576b67194acdb9e9ea9b7c23d407e7c99ace60b0e7fd
-- name: v1.24.15/bin/linux/arm64/kube-scheduler
-  sha256: 210666e04943749e120ac9fa95761a06d371f9c9af11025d367d1f88c9615610
-- name: v1.24.15/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 2a80af8724210d62503a5fa2dd41a815984669185f66cfb622a0e3cbbcfd5674
-- name: v1.24.15/bin/linux/arm64/kube-scheduler.tar
-  sha256: e3942cb3f17b77e9308d07cb1b8dcf41d7ba7339a51cc00cd40d122ebc0aeed1
-- name: v1.24.15/bin/linux/arm64/kubeadm
-  sha256: a3dc47ef4691f53d69ca8c7747e7668a4b620105ec6856f326badbe1d3d86c2d
-- name: v1.24.15/bin/linux/arm64/kubectl
-  sha256: 49f794a719d2e5c6cc1fbd19c45603e5e62e828be216975e4ae1a71eacba78f2
-- name: v1.24.15/bin/linux/arm64/kubectl-convert
-  sha256: eddbf764235302675c6c4ea56f5540fbec2a01beb9023ee01c3100b95a12ef40
-- name: v1.24.15/bin/linux/arm64/kubelet
-  sha256: a1e253b03c1a6e22f315e4619d4cf26ee1282ccb3ef94c37357ee930699a10d7
-- name: v1.24.15/bin/linux/arm64/mounter
-  sha256: 27503721f9572b96d9108727db15751405d01e597d73aaacbf24e31e2add118e
-- name: v1.24.15/kubernetes-release.spdx
-  sha256: c51697efbc815fff17c2ad390a805a58f932482b63dde7215b268431dfead7ce
-- name: v1.24.15/kubernetes-source.spdx
-  sha256: 550b5e4603f409d8c31240d2022aa296d7fc9346d4dd1275da779ccd6d4dd96b
-# kubernetes 1.24.16
-- name: v1.24.16/bin/darwin/amd64/kubectl
-  sha256: d3f8560a7fbfe481e246aad8fa77865e203d623ac025f5797c0e9c17428fac27
-- name: v1.24.16/bin/darwin/amd64/kubectl-convert
-  sha256: 3259c08bda27af4fad3beda8b710f85b11ef91e68b61fb33a7511e7b86989c0c
-- name: v1.24.16/bin/darwin/arm64/kubectl
-  sha256: 7bb0924c81b982ddb81755da841be5544d3360965d821e7c43d6dda2a013c934
-- name: v1.24.16/bin/darwin/arm64/kubectl-convert
-  sha256: 71fe86cda0accb9897349c8f828e6930d55dac79c1a45c78704aa3ffbda47bef
-- name: v1.24.16/bin/linux/386/kubectl
-  sha256: 027d09fa9db1d15e1c13209883a74c6d58aeabc952bc924626404c4996e01069
-- name: v1.24.16/bin/linux/386/kubectl-convert
-  sha256: e0b13ed243fd9450cf74f3ca99ce1b22509f60e3f31103dc1a8e54463d9d61aa
-- name: v1.24.16/bin/linux/amd64/apiextensions-apiserver
-  sha256: 18921ff1e3dee5f10c42f7223fd24d31abb6484235cfe8537737e0c640cb67b9
-- name: v1.24.16/bin/linux/amd64/kube-aggregator
-  sha256: 4267bf4e23fc0a13a596d00696f3add3778f81ab4d53ee951a98a07b0a84a171
-- name: v1.24.16/bin/linux/amd64/kube-apiserver
-  sha256: ad0e2985832c8677d6e0675a3cd102c283d74d7ce5f8b0195a45430f0835f649
-- name: v1.24.16/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/amd64/kube-apiserver.tar
-  sha256: c3488d8cb4fd88134be4f41e969f84e575c4967f3c0aa536647fe22f70b32699
-- name: v1.24.16/bin/linux/amd64/kube-controller-manager
-  sha256: 8353076fef66f2af093bd98b923f770830189e8d9ebaafc485fe03d86c93d2bb
-- name: v1.24.16/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/amd64/kube-controller-manager.tar
-  sha256: a3fe53f2d68440e4179a538c58093cf296952d771d8cad52cea801e257a69dd6
-- name: v1.24.16/bin/linux/amd64/kube-log-runner
-  sha256: d7ad1239219265061636aae2ad1167c000d09112f1ac8cf77a942aa36c78fe88
-- name: v1.24.16/bin/linux/amd64/kube-proxy
-  sha256: bd6ebf908e7f197a2fdea1ecc18f7de19a649c45b0fc2faca24d3b14fcca20a6
-- name: v1.24.16/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/amd64/kube-proxy.tar
-  sha256: 2bf7ab2a0e079c0a8ec284309f347328e4cb34b5b58dfa30e4d4384a97dc2a13
-- name: v1.24.16/bin/linux/amd64/kube-scheduler
-  sha256: f200b9b5f72602aad77eccfde26193775dfee4e06d0793e71c8c3293ede9a5ed
-- name: v1.24.16/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/amd64/kube-scheduler.tar
-  sha256: d4ed53f9fa261315b09122e370bdcb367bcfcba9611cc7a45ff0f96adc637b07
-- name: v1.24.16/bin/linux/amd64/kubeadm
-  sha256: 4c385d35a0e1506e95adb6230d6d2c14e61fc8a99e4746ca1c2d687bfd963a53
-- name: v1.24.16/bin/linux/amd64/kubectl
-  sha256: 33f8179cd124ab97268ec0cf4c91a05514c8e82d7a341d337e92881401844d71
-- name: v1.24.16/bin/linux/amd64/kubectl-convert
-  sha256: 8efeed1727facca79acb9b42e9c41fcd758aa5d3fc7e21f73857669b42ecbb42
-- name: v1.24.16/bin/linux/amd64/kubelet
-  sha256: af1a077cba6998d28fc6a3d07b36e25f9db2e5adae4ca20895bec55bb7c48f2a
-- name: v1.24.16/bin/linux/amd64/mounter
-  sha256: 1efaa0a6bd19ce59e7122e46d3d1af47755f918fdd84d5b09116faf250866ebc
-- name: v1.24.16/bin/linux/arm64/apiextensions-apiserver
-  sha256: 7728e3dc776542a203a3f6332bbff7e7962007109040c61f97ec58f3e882ceee
-- name: v1.24.16/bin/linux/arm64/kube-aggregator
-  sha256: 16129c2e087b0894ca54058bdff8375fdf6fde63ca7f873a855131ada6330604
-- name: v1.24.16/bin/linux/arm64/kube-apiserver
-  sha256: 94c57222af27970a0e7868a9ec60482cec0da2d9aa95113fa64231734c8d0dbd
-- name: v1.24.16/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/arm64/kube-apiserver.tar
-  sha256: db8f410e530a9d9d82c3653295a19215c6f7034a2904ffcbf87e4c29578262cf
-- name: v1.24.16/bin/linux/arm64/kube-controller-manager
-  sha256: 52e0b6585663ff1ec03c5cee2cd63ad46fb9ff43bc1161c7b69644f3025fa14e
-- name: v1.24.16/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 05334556244b479ed661183eb4a84062fe3926d1d0fc3ae12bd19e87fa9bb6a7
-- name: v1.24.16/bin/linux/arm64/kube-log-runner
-  sha256: f698baf5f0d2e137342c41a37d3f6506078be1a94ca036d63b3becd27ba07eda
-- name: v1.24.16/bin/linux/arm64/kube-proxy
-  sha256: c40c6c14621d0a0fc6977e8370f49401be5c7e5d4897458164db2b62c99d5dc0
-- name: v1.24.16/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/arm64/kube-proxy.tar
-  sha256: 068495a4e93b6fa56da6a816e1d4b9e8d021c9a2ac43607af7240e8fbeffa955
-- name: v1.24.16/bin/linux/arm64/kube-scheduler
-  sha256: d440c121c70804b72468c2a53db5292560a767fc1881fa4c703b4085ec8275e3
-- name: v1.24.16/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: d88a7e5d5a908511ec0616ae25cf824b87d4a8142935583ff4d40304af57c9ee
-- name: v1.24.16/bin/linux/arm64/kube-scheduler.tar
-  sha256: 797a2d4145bc576995efd5c4d9d83a061b85ece73d6171c6e9e860aec24f2c56
-- name: v1.24.16/bin/linux/arm64/kubeadm
-  sha256: 6d52be09c9075895bacb8e65caec7147340809afc3a70afb11f27aa47579b427
-- name: v1.24.16/bin/linux/arm64/kubectl
-  sha256: d7f28d3d99cee6c2cdf03e77c063aeb805b120e65c2780baf3f040c9187d6142
-- name: v1.24.16/bin/linux/arm64/kubectl-convert
-  sha256: 22ebed3f0217c000882c8d51edce1f2641e2be9bae54b57916c8434a1c3e1776
-- name: v1.24.16/bin/linux/arm64/kubelet
-  sha256: 3cc22ae7cb1768031fe17a672898cb625bd8cf9e679282953b805df780718654
-- name: v1.24.16/bin/linux/arm64/mounter
-  sha256: 2cd3bb641476b9b35577fc70a3670fb4b45b06db91781326d57b08403d246935
-- name: v1.24.16/kubernetes-release.spdx
-  sha256: c21615a59254e931323e939bc79627ce4a98006b3632108c372dcfbe739eb147
-- name: v1.24.16/kubernetes-source.spdx
-  sha256: a69f3779e7c117327d4a48d76f0ad7b6f413414106c36149beda3663d6da022b
-# kubernetes 1.24.17
-- name: v1.24.17/bin/darwin/amd64/kubectl
-  sha256: 1eb904b2c1148ff8431b0bd86677287a48bff000f93fd2d36377fbe956bd1e49
-- name: v1.24.17/bin/darwin/amd64/kubectl-convert
-  sha256: 7f4d03fbaa6b1c860c3e895894b97592cca55f166d5de482595029ea453d4bca
-- name: v1.24.17/bin/darwin/arm64/kubectl
-  sha256: 7addbe3f1e22a366fa05aed4f268e77e83d902b40a5854e192b4205ed92e5f8d
-- name: v1.24.17/bin/darwin/arm64/kubectl-convert
-  sha256: a0e5ea01668501c93184aaa8164726c0d5cd8259a141ecbd81481373ecd3b449
-- name: v1.24.17/bin/linux/386/kubectl
-  sha256: b0cde7ca2973a4420aaaca967fe45fe3d763a319a4850955333f0e2c1036b4a4
-- name: v1.24.17/bin/linux/386/kubectl-convert
-  sha256: 119d814d9e6df5dcdcc07cd603efe5a0288d9a7142e33c2fc277b169e3e89499
-- name: v1.24.17/bin/linux/amd64/apiextensions-apiserver
-  sha256: d9597f0bb60747e7f10370c7c544d541421b095db7580f0bc48a24ddfc5f7dcf
-- name: v1.24.17/bin/linux/amd64/kube-aggregator
-  sha256: 922207c55954e51723ad1e1895374b0fa3f36139ffeabb68d1f2160382ef9883
-- name: v1.24.17/bin/linux/amd64/kube-apiserver
-  sha256: b92a2631a9aa741b268b71844ed8920039bdbdaa8aee0d595562a8fb9b58bf99
-- name: v1.24.17/bin/linux/amd64/kube-apiserver.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/amd64/kube-apiserver.tar
-  sha256: 3b65d653386b0d6dd00160c0e85f36ae131c0f2b47eab364cd70c7fbfbe8b4ab
-- name: v1.24.17/bin/linux/amd64/kube-controller-manager
-  sha256: c8801bca5d80e31607b24c3979a843e4da4ab8cf2145d5cfa88db6ce9e0b93d1
-- name: v1.24.17/bin/linux/amd64/kube-controller-manager.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/amd64/kube-controller-manager.tar
-  sha256: 45fc89995bd17a201a67eecf8ea0e3744622daa3a8f30c6967f1894b1a4480fb
-- name: v1.24.17/bin/linux/amd64/kube-log-runner
-  sha256: f97e37714ca0a0a3585f714235f9a51c1f8fa07deab2b53a5a5bd376226a1998
-- name: v1.24.17/bin/linux/amd64/kube-proxy
-  sha256: d6663ca58e29da5ad54c8ab0846efbce9eb07568bbf6f728e1ec0a5c835b58d1
-- name: v1.24.17/bin/linux/amd64/kube-proxy.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/amd64/kube-proxy.tar
-  sha256: b89dc9686b81bbbb0989c64b34e27fc1c84d7e14b768ea93733386bfc4f5485a
-- name: v1.24.17/bin/linux/amd64/kube-scheduler
-  sha256: ce2f040ffed8e7e75e4733b26d9c58e197264a603bb9a04e1b8cb8d863acdf12
-- name: v1.24.17/bin/linux/amd64/kube-scheduler.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/amd64/kube-scheduler.tar
-  sha256: e7193255c9ece8f49004a0649be006613d2299d89f0f352b1084bbc077a2a36a
-- name: v1.24.17/bin/linux/amd64/kubeadm
-  sha256: 774bae9f86c093fd28c7649cf4a84cb3555a70d29ea5dba438abc990dd0febc9
-- name: v1.24.17/bin/linux/amd64/kubectl
-  sha256: 3e9588e3326c7110a163103fc3ea101bb0e85f4d6fd228cf928fa9a2a20594d5
-- name: v1.24.17/bin/linux/amd64/kubectl-convert
-  sha256: d5d0ebf549345a622106740ec3bfa43f7a0389778b14e032b44df59ad1333941
-- name: v1.24.17/bin/linux/amd64/kubelet
-  sha256: babf327f3089982b271ac0acff51009eb0d649f7d1f4fbd976419ee76864f633
-- name: v1.24.17/bin/linux/amd64/mounter
-  sha256: af57e269cce129610b5b70c8f48d5153e4e094a5fe46c5da39481387707d6e08
-- name: v1.24.17/bin/linux/arm64/apiextensions-apiserver
-  sha256: a9cb5b9597b194d747bd432c246ee1a4062bf390748d8c81ee7037e99eaf9895
-- name: v1.24.17/bin/linux/arm64/kube-aggregator
-  sha256: 54430f0fcfd106e470fb019c143a1f84fec69b102f4600d46d26233cb29a468c
-- name: v1.24.17/bin/linux/arm64/kube-apiserver
-  sha256: cd1025d49b69907aa1b0abd98a4569de15ffbdd4252a7a36479894988803d095
-- name: v1.24.17/bin/linux/arm64/kube-apiserver.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/arm64/kube-apiserver.tar
-  sha256: 1908ea1c29c601836273878a0d5e49bb0703b8bd492d9b28c66a38b7ec440ece
-- name: v1.24.17/bin/linux/arm64/kube-controller-manager
-  sha256: dd5bf9c31597975dcae53a650b682b34f77f5c1d375ca597a413852a887988d2
-- name: v1.24.17/bin/linux/arm64/kube-controller-manager.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/arm64/kube-controller-manager.tar
-  sha256: 1bf59c33803796a84f8f99622417222cd2fe43e53d5b7ce3e8051e416952464d
-- name: v1.24.17/bin/linux/arm64/kube-log-runner
-  sha256: b54f4ed74a47797e02b51266de1ff87c64eae3745f236057f1a5d92fa43a0f62
-- name: v1.24.17/bin/linux/arm64/kube-proxy
-  sha256: df7173fef6ed86c1d776898b83c0148928c7b6a146304111d17d2c3497eda172
-- name: v1.24.17/bin/linux/arm64/kube-proxy.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/arm64/kube-proxy.tar
-  sha256: 4e7d53a4ab6201c619484be9692229419e9bf8a93d5b5c0bbf7cc69bc8a790fa
-- name: v1.24.17/bin/linux/arm64/kube-scheduler
-  sha256: 6cf8ae89e4f777df6d330ec755a8972ffdec28243513711b71063eb0e8ff4fdf
-- name: v1.24.17/bin/linux/arm64/kube-scheduler.docker_tag
-  sha256: 92969c8802c0bcabebb3fc8a117a41bb1a383ac3a1c3d71e18e39098d8fea2e9
-- name: v1.24.17/bin/linux/arm64/kube-scheduler.tar
-  sha256: 4ae7812152bd6bfd303abe12b833ec44033a960ef02d110148c2ebf28dee32a6
-- name: v1.24.17/bin/linux/arm64/kubeadm
-  sha256: 1d484faddd1b789c67cdadb315d53250d9906e5b727c9254131c01b2f8f17beb
-- name: v1.24.17/bin/linux/arm64/kubectl
-  sha256: 66885bda3a202546778c77f0b66dcf7f576b5a49ff9456acf61329da784a602d
-- name: v1.24.17/bin/linux/arm64/kubectl-convert
-  sha256: cfc733d10193f887ffefbada494f9734c084df947269db3cb249c2a06a69a965
-- name: v1.24.17/bin/linux/arm64/kubelet
-  sha256: dc83bc7a47715f1fa29ea7f1e1d13e3626a8bfbe3a6793d8cb97273289fe9bba
-- name: v1.24.17/bin/linux/arm64/mounter
-  sha256: eee629ce9443b9dd57e47cbca163ebd8e156cf11e0880d905b976296810ec55f
-- name: v1.24.17/kubernetes-release.spdx
-  sha256: 78f6454e018213006313ffdc4713d63cbd1e160f9dbf84240366c2ce1ec437a7
-- name: v1.24.17/kubernetes-source.spdx
-  sha256: bd288ea8af006ce0581b55f3f25a40d279e24276bf54e5a637ee2cca8e752202
diff --git a/pkg/kubeconfig/create_kubecfg_test.go b/pkg/kubeconfig/create_kubecfg_test.go
index 0b068491c7bcc..1e87931982fea 100644
--- a/pkg/kubeconfig/create_kubecfg_test.go
+++ b/pkg/kubeconfig/create_kubecfg_test.go
@@ -118,7 +118,7 @@ func (f fakeKeyStore) MirrorTo(ctx context.Context, basedir vfs.Path) error {
 func buildMinimalCluster(clusterName string, masterPublicName string, lbCert bool, nlb bool) *kops.Cluster {
 	cluster := testutils.BuildMinimalCluster(clusterName)
 	cluster.Spec.API.PublicName = masterPublicName
-	cluster.Spec.KubernetesVersion = "1.24.0"
+	cluster.Spec.KubernetesVersion = "1.30.0"
 	if lbCert || nlb {
 		cluster.Spec.API.LoadBalancer = &kops.LoadBalancerAccessSpec{}
 		if lbCert {
diff --git a/pkg/model/components/awscloudcontrollermanager.go b/pkg/model/components/awscloudcontrollermanager.go
index 19805d5feaa8a..159a30a714b44 100644
--- a/pkg/model/components/awscloudcontrollermanager.go
+++ b/pkg/model/components/awscloudcontrollermanager.go
@@ -75,8 +75,6 @@ func (b *AWSCloudControllerManagerOptionsBuilder) BuildOptions(o interface{}) er
 	if eccm.Image == "" {
 		// See https://us.gcr.io/k8s-artifacts-prod/provider-aws/cloud-controller-manager
 		switch b.KubernetesVersion.Minor {
-		case 24:
-			eccm.Image = "registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19"
 		case 25:
 			eccm.Image = "registry.k8s.io/provider-aws/cloud-controller-manager:v1.25.15"
 		case 26:
diff --git a/pkg/model/components/clusterautoscaler.go b/pkg/model/components/clusterautoscaler.go
index 494178d5b6238..e8d2e01b7a8cc 100644
--- a/pkg/model/components/clusterautoscaler.go
+++ b/pkg/model/components/clusterautoscaler.go
@@ -43,8 +43,6 @@ func (b *ClusterAutoscalerOptionsBuilder) BuildOptions(o interface{}) error {
 		v, err := util.ParseKubernetesVersion(clusterSpec.KubernetesVersion)
 		if err == nil {
 			switch v.Minor {
-			case 24:
-				image = "registry.k8s.io/autoscaling/cluster-autoscaler:v1.24.3"
 			case 25:
 				image = "registry.k8s.io/autoscaling/cluster-autoscaler:v1.25.3"
 			case 26:
diff --git a/pkg/model/components/containerd.go b/pkg/model/components/containerd.go
index c46344b017c5b..47487e8948655 100644
--- a/pkg/model/components/containerd.go
+++ b/pkg/model/components/containerd.go
@@ -42,9 +42,7 @@ func (b *ContainerdOptionsBuilder) BuildOptions(o interface{}) error {
 	// Set version based on Kubernetes version
 	if fi.ValueOf(containerd.Version) == "" {
 		switch {
-		case b.IsKubernetesLT("1.24.14"):
-			fallthrough
-		case b.IsKubernetesGTE("1.25") && b.IsKubernetesLT("1.25.10"):
+		case b.IsKubernetesLT("1.25.10"):
 			fallthrough
 		case b.IsKubernetesGTE("1.26") && b.IsKubernetesLT("1.26.5"):
 			fallthrough
diff --git a/pkg/model/components/etcdmanager/model.go b/pkg/model/components/etcdmanager/model.go
index 38d4aa741941e..e78efc1066ea5 100644
--- a/pkg/model/components/etcdmanager/model.go
+++ b/pkg/model/components/etcdmanager/model.go
@@ -208,7 +208,7 @@ spec:
     emptyDir: {}
 `
 
-const kopsUtilsImage = "registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1"
+const kopsUtilsImage = "registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1"
 
 // buildPod creates the pod spec, based on the EtcdClusterSpec
 func (b *EtcdManagerBuilder) buildPod(etcdCluster kops.EtcdClusterSpec, instanceGroupName string) (*v1.Pod, error) {
diff --git a/pkg/model/components/etcdmanager/tests/interval/tasks.yaml b/pkg/model/components/etcdmanager/tests/interval/tasks.yaml
index b009084060b6e..4899c35b9fc12 100644
--- a/pkg/model/components/etcdmanager/tests/interval/tasks.yaml
+++ b/pkg/model/components/etcdmanager/tests/interval/tasks.yaml
@@ -113,7 +113,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -150,7 +150,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -169,7 +169,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
@@ -254,7 +254,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -291,7 +291,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -310,7 +310,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
diff --git a/pkg/model/components/etcdmanager/tests/minimal/tasks.yaml b/pkg/model/components/etcdmanager/tests/minimal/tasks.yaml
index 0bae8f736d024..91f311ac59c9f 100644
--- a/pkg/model/components/etcdmanager/tests/minimal/tasks.yaml
+++ b/pkg/model/components/etcdmanager/tests/minimal/tasks.yaml
@@ -112,7 +112,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -149,7 +149,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -168,7 +168,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
@@ -252,7 +252,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -289,7 +289,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -308,7 +308,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
diff --git a/pkg/model/components/etcdmanager/tests/overwrite_settings/tasks.yaml b/pkg/model/components/etcdmanager/tests/overwrite_settings/tasks.yaml
index 74684f3e692f4..4c8fb2531e069 100644
--- a/pkg/model/components/etcdmanager/tests/overwrite_settings/tasks.yaml
+++ b/pkg/model/components/etcdmanager/tests/overwrite_settings/tasks.yaml
@@ -115,7 +115,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -152,7 +152,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -171,7 +171,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
@@ -258,7 +258,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -295,7 +295,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -314,7 +314,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
diff --git a/pkg/model/components/etcdmanager/tests/proxy/tasks.yaml b/pkg/model/components/etcdmanager/tests/proxy/tasks.yaml
index c4ab5808f966a..c32ac99636296 100644
--- a/pkg/model/components/etcdmanager/tests/proxy/tasks.yaml
+++ b/pkg/model/components/etcdmanager/tests/proxy/tasks.yaml
@@ -121,7 +121,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -158,7 +158,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -177,7 +177,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
@@ -270,7 +270,7 @@ Contents: |
       - --src=/ko-app/kops-utils-cp
       command:
       - /ko-app/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: kops-utils-cp
       resources: {}
       volumeMounts:
@@ -307,7 +307,7 @@ Contents: |
       - --src=/opt/etcd-v3.4.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-4-13
       resources: {}
       volumeMounts:
@@ -326,7 +326,7 @@ Contents: |
       - --src=/opt/etcd-v3.5.13/etcdctl
       command:
       - /opt/kops-utils/kops-utils-cp
-      image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+      image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
       name: init-etcd-symlinks-3-5-13
       resources: {}
       volumeMounts:
diff --git a/pkg/model/components/kubeapiserver/model.go b/pkg/model/components/kubeapiserver/model.go
index 36339a1a7722f..a7c7aac1c965b 100644
--- a/pkg/model/components/kubeapiserver/model.go
+++ b/pkg/model/components/kubeapiserver/model.go
@@ -79,7 +79,7 @@ kind: Pod
 spec:
   containers:
   - name: healthcheck
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         # The sidecar serves a healthcheck on the same port,
diff --git a/pkg/model/components/kubeapiserver/tests/minimal/tasks.yaml b/pkg/model/components/kubeapiserver/tests/minimal/tasks.yaml
index d742983392f25..96e6cfdfc8a32 100644
--- a/pkg/model/components/kubeapiserver/tests/minimal/tasks.yaml
+++ b/pkg/model/components/kubeapiserver/tests/minimal/tasks.yaml
@@ -10,7 +10,7 @@ Contents: |
       - --ca-cert=/secrets/ca.crt
       - --client-cert=/secrets/client.crt
       - --client-key=/secrets/client.key
-      image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+      image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
       livenessProbe:
         httpGet:
           host: 127.0.0.1
diff --git a/pkg/model/openstackmodel/servergroup_test.go b/pkg/model/openstackmodel/servergroup_test.go
index 7e29b14721c4e..d72f67ea579ae 100644
--- a/pkg/model/openstackmodel/servergroup_test.go
+++ b/pkg/model/openstackmodel/servergroup_test.go
@@ -62,7 +62,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -125,7 +125,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -215,7 +215,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -344,7 +344,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -409,7 +409,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -823,7 +823,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -952,7 +952,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1041,7 +1041,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1106,7 +1106,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1195,7 +1195,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1244,7 +1244,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1295,7 +1295,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1344,7 +1344,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1393,7 +1393,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1442,7 +1442,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
@@ -1491,7 +1491,7 @@ func getServerGroupModelBuilderTestInput() []serverGroupModelBuilderTestInput {
 							},
 						},
 					},
-					KubernetesVersion: "1.24.0",
+					KubernetesVersion: "1.30.0",
 					Networking: kops.NetworkingSpec{
 						Subnets: []kops.ClusterSubnetSpec{
 							{
diff --git a/pkg/nodelabels/builder_test.go b/pkg/nodelabels/builder_test.go
index 467e3e9c05637..18a0778a4f06c 100644
--- a/pkg/nodelabels/builder_test.go
+++ b/pkg/nodelabels/builder_test.go
@@ -34,7 +34,7 @@ func TestBuildNodeLabels(t *testing.T) {
 			name: "RoleControlPlane",
 			cluster: &kops.Cluster{
 				Spec: kops.ClusterSpec{
-					KubernetesVersion: "v1.24.0",
+					KubernetesVersion: "v1.30.0",
 					ControlPlaneKubelet: &kops.KubeletConfigSpec{
 						NodeLabels: map[string]string{
 							"controlPlane1": "controlPlane1",
@@ -75,7 +75,7 @@ func TestBuildNodeLabels(t *testing.T) {
 			name: "RoleNode",
 			cluster: &kops.Cluster{
 				Spec: kops.ClusterSpec{
-					KubernetesVersion: "v1.24.0",
+					KubernetesVersion: "v1.30.0",
 					ControlPlaneKubelet: &kops.KubeletConfigSpec{
 						NodeLabels: map[string]string{
 							"controlPlane1": "controlPlane1",
diff --git a/pkg/nodemodel/wellknownassets/kopsassets_test.go b/pkg/nodemodel/wellknownassets/kopsassets_test.go
index 88434f9d558b6..1aa6e3fa2e3c2 100644
--- a/pkg/nodemodel/wellknownassets/kopsassets_test.go
+++ b/pkg/nodemodel/wellknownassets/kopsassets_test.go
@@ -36,15 +36,15 @@ func Test_BuildMirroredAsset(t *testing.T) {
 		{
 			url: "https://artifacts.k8s.io/binaries/kops/%s/linux/amd64/nodeup",
 			expected: []string{
-				"https://artifacts.k8s.io/binaries/kops/1.29.0-beta.1/linux/amd64/nodeup",
-				"https://github.com/kubernetes/kops/releases/download/v1.29.0-beta.1/nodeup-linux-amd64",
+				"https://artifacts.k8s.io/binaries/kops/1.30.0-alpha.1/linux/amd64/nodeup",
+				"https://github.com/kubernetes/kops/releases/download/v1.30.0-alpha.1/nodeup-linux-amd64",
 			},
 		},
 		{
 			url: "https://artifacts.k8s.io/binaries/kops/%s/linux/arm64/nodeup",
 			expected: []string{
-				"https://artifacts.k8s.io/binaries/kops/1.29.0-beta.1/linux/arm64/nodeup",
-				"https://github.com/kubernetes/kops/releases/download/v1.29.0-beta.1/nodeup-linux-arm64",
+				"https://artifacts.k8s.io/binaries/kops/1.30.0-alpha.1/linux/arm64/nodeup",
+				"https://github.com/kubernetes/kops/releases/download/v1.30.0-alpha.1/nodeup-linux-arm64",
 			},
 		},
 	}
diff --git a/tests/integration/create_cluster/different-amis/expected-v1alpha2.yaml b/tests/integration/create_cluster/different-amis/expected-v1alpha2.yaml
index 7db5dc022d559..e2e8156ed2d20 100644
--- a/tests/integration/create_cluster/different-amis/expected-v1alpha2.yaml
+++ b/tests/integration/create_cluster/different-amis/expected-v1alpha2.yaml
@@ -40,7 +40,7 @@ spec:
   kubernetesApiAccess:
   - 0.0.0.0/0
   - ::/0
-  kubernetesVersion: v1.24.0
+  kubernetesVersion: v1.30.0
   masterPublicName: api.amis.example.com
   networkCIDR: 172.20.0.0/16
   networking:
@@ -75,9 +75,6 @@ metadata:
   name: apiserver-us-test-1a
 spec:
   image: ami-image
-  instanceMetadata:
-    httpPutResponseHopLimit: 1
-    httpTokens: required
   machineType: m3.medium
   maxSize: 1
   minSize: 1
@@ -96,9 +93,6 @@ metadata:
   name: bastions
 spec:
   image: ami-image
-  instanceMetadata:
-    httpPutResponseHopLimit: 1
-    httpTokens: required
   machineType: t2.micro
   maxSize: 1
   minSize: 1
@@ -117,8 +111,6 @@ metadata:
   name: control-plane-us-test-1a
 spec:
   image: ami-control-plane
-  instanceMetadata:
-    httpTokens: required
   machineType: m3.medium
   maxSize: 1
   minSize: 1
@@ -137,9 +129,6 @@ metadata:
   name: nodes-us-test-1a
 spec:
   image: ami-worker-image
-  instanceMetadata:
-    httpPutResponseHopLimit: 1
-    httpTokens: required
   machineType: t2.medium
   maxSize: 1
   minSize: 1
diff --git a/tests/integration/create_cluster/different-amis/options.yaml b/tests/integration/create_cluster/different-amis/options.yaml
index e45e533cb743d..5aa23d75fa0f3 100644
--- a/tests/integration/create_cluster/different-amis/options.yaml
+++ b/tests/integration/create_cluster/different-amis/options.yaml
@@ -3,7 +3,7 @@ Zones:
 - us-test-1a
 CloudProvider: aws
 Networking: cni
-KubernetesVersion: v1.24.0
+kubernetesVersion: v1.30.0
 Image: ami-image
 ControlPlaneImage: ami-control-plane
 NodeImage: ami-worker-image
diff --git a/tests/integration/create_cluster/minimal-1.24/expected-v1alpha2.yaml b/tests/integration/create_cluster/minimal-1.30/expected-v1alpha2.yaml
similarity index 84%
rename from tests/integration/create_cluster/minimal-1.24/expected-v1alpha2.yaml
rename to tests/integration/create_cluster/minimal-1.30/expected-v1alpha2.yaml
index 2b9c905ad2da5..8c501c0af2ade 100644
--- a/tests/integration/create_cluster/minimal-1.24/expected-v1alpha2.yaml
+++ b/tests/integration/create_cluster/minimal-1.30/expected-v1alpha2.yaml
@@ -40,7 +40,7 @@ spec:
   kubernetesApiAccess:
   - 0.0.0.0/0
   - ::/0
-  kubernetesVersion: v1.24.0
+  kubernetesVersion: v1.30.0
   networkCIDR: 172.20.0.0/16
   networking:
     cni: {}
@@ -67,9 +67,7 @@ metadata:
     kops.k8s.io/cluster: minimal.example.com
   name: control-plane-us-test-1a
 spec:
-  image: 099720109477/ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-20240426
-  instanceMetadata:
-    httpTokens: required
+  image: 099720109477/ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-20240501
   machineType: m3.medium
   maxSize: 1
   minSize: 1
@@ -87,10 +85,7 @@ metadata:
     kops.k8s.io/cluster: minimal.example.com
   name: nodes-us-test-1a
 spec:
-  image: 099720109477/ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-20240426
-  instanceMetadata:
-    httpPutResponseHopLimit: 1
-    httpTokens: required
+  image: 099720109477/ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-20240501
   machineType: t2.medium
   maxSize: 1
   minSize: 1
diff --git a/tests/integration/create_cluster/minimal-1.24/options.yaml b/tests/integration/create_cluster/minimal-1.30/options.yaml
similarity index 76%
rename from tests/integration/create_cluster/minimal-1.24/options.yaml
rename to tests/integration/create_cluster/minimal-1.30/options.yaml
index b0adddad121e8..32f4dca11319d 100644
--- a/tests/integration/create_cluster/minimal-1.24/options.yaml
+++ b/tests/integration/create_cluster/minimal-1.30/options.yaml
@@ -3,4 +3,4 @@ Zones:
 - us-test-1a
 CloudProvider: aws
 Networking: cni
-KubernetesVersion: v1.24.0
+KubernetesVersion: v1.30.0
diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content
index 5b8d5e855d364..4ed62b059d0a0 100644
--- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: a49ac591f26eabc0c61c42a4e2b97be4545737a13fea75cf7d982b64aa52edbd
+    manifestHash: cbd55cd39159e15751511e17c80df893cef3337d89205dccfca9dffbf4b4ce00
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 1eaf1a91fb287..aa1b22d7383b1 100644
--- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 852abb92553e4..e74e6df8bd5b6 100644
--- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 44f018cb48724..94693e3ab9587 100644
--- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 20e23d845fa36..04e8afb4f53fd 100644
--- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -51,7 +51,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -88,7 +88,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -107,7 +107,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 3e1ca4e586103..50e31254774b1 100644
--- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -51,7 +51,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -88,7 +88,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -107,7 +107,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index a7e17e4ac5c00..489eada78cb00 100644
--- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: be635469f62df8a4305c56b8407fe93b48dd46707fd8c2b6200066d20c37d78d
+    manifestHash: 50af20f3dc079b779c43d3639aeae7965ef0138d39b66cc602bd92d158a4db3c
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index b2eeb91fb10ca..fd9d6ba178030 100644
--- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 0d9820cfc5a5e..1d1ba489a511b 100644
--- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
+    manifestHash: 3950a960f29504cc3130b24f5a50281c88365ead305750886dedfaaf4cbd63cd
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 0322368ae45b7..e0f311486d676 100644
--- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content
index c134f66979545..a52ab2e73b11a 100644
--- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: bed87cc69298b3ac1be78ef0c9daa84fa5eb15bbcb523797f33f66f606d29e71
+    manifestHash: 9cf0d6c79a1c0e0845b12093e6af630f68f766ef63bc720d906fea2c33caf7a0
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f3d8bf0f699ae..0d4c9b0df215d 100644
--- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index b2f918a3992b8..993fc391993c7 100644
--- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 4236ed5f445b5..8f031a2b33921 100644
--- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content
index 9930ccb6756f2..74f065cc918dd 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 621c5af56e62065ab35df2258cac66f0a91063e291a4a9eb31fea1c23952a814
+    manifestHash: 2de168db82711ebbc42e6f3e54ff16260dbf6f81a1824245bfef523f0f09e65c
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 0eac32165f924..a66f82c879dfc 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index a154cfce46d8d..082935e31aaea 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index d883ce45f6c58..e096a6657e7f4 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content
index dc74cfc890eee..7096be3124720 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: cd699240e608a1b02cba5a4ab582996263c9abba8234ee44cc2ddad2427c9e3d
+    manifestHash: bc650ec3624b36f3df6127bc93d86f934940667f10f95c7c3145390d87d3be8a
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 8d683aae714b4..a6995e896a7c3 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 8987532b965af..6e9fe890f5486 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 87e04ee139b24..f6ec70b64f344 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/complex/data/aws_launch_template_master-us-test-1a.masters.complex.example.com_user_data b/tests/integration/update_cluster/complex/data/aws_launch_template_master-us-test-1a.masters.complex.example.com_user_data
index 29a786460098b..7fd1f02fdaa65 100644
--- a/tests/integration/update_cluster/complex/data/aws_launch_template_master-us-test-1a.masters.complex.example.com_user_data
+++ b/tests/integration/update_cluster/complex/data/aws_launch_template_master-us-test-1a.masters.complex.example.com_user_data
@@ -139,7 +139,7 @@ ClusterName: complex.example.com
 ConfigBase: memfs://clusters.example.com/complex.example.com
 InstanceGroupName: master-us-test-1a
 InstanceGroupRole: ControlPlane
-NodeupConfigHash: TagVYsukF7ql0g7GpSE6Z1E3sQXC5hWT1Vf/OCgBHJU=
+NodeupConfigHash: UHWFfYNt82BPcCuW6MbwsJz+NubTfY7JsTsj9lxiQ4M=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/complex/data/aws_launch_template_nodes.complex.example.com_user_data b/tests/integration/update_cluster/complex/data/aws_launch_template_nodes.complex.example.com_user_data
index 45e6bfe56de2e..e356959fafc12 100644
--- a/tests/integration/update_cluster/complex/data/aws_launch_template_nodes.complex.example.com_user_data
+++ b/tests/integration/update_cluster/complex/data/aws_launch_template_nodes.complex.example.com_user_data
@@ -162,7 +162,7 @@ ConfigServer:
   - https://kops-controller.internal.complex.example.com:3988/
 InstanceGroupName: nodes
 InstanceGroupRole: Node
-NodeupConfigHash: ukpudxUr7MbT3D8AdXZGqcvGgvYDdQq46ulbpo/ve/g=
+NodeupConfigHash: Yj+boNrEIVEzD81P6Pu9TIC/KGZbZdHTJtyYBeakpzQ=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content
index dcc2a4bd3d3f0..211a2580917be 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content
@@ -37,8 +37,7 @@ spec:
     clusterName: complex.example.com
     concurrentNodeSyncs: 5
     configureCloudRoutes: false
-    enableLeaderMigration: true
-    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
   cloudLabels:
@@ -50,8 +49,8 @@ spec:
   containerd:
     logLevel: info
     runc:
-      version: 1.1.5
-    version: 1.6.20
+      version: 1.1.12
+    version: 1.7.16
   dnsZone: Z1AFAKE1ZON3YO
   etcdClusters:
   - backups:
@@ -105,9 +104,8 @@ spec:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -139,9 +137,8 @@ spec:
     concurrentJobSyncs: 10
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -163,13 +160,12 @@ spec:
   kubeProxy:
     clusterCIDR: 100.96.0.0/11
     cpuRequest: 100m
-    image: registry.k8s.io/kube-proxy:v1.24.0
+    image: registry.k8s.io/kube-proxy:v1.30.0
     logLevel: 2
   kubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -183,7 +179,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
@@ -196,7 +191,7 @@ spec:
   kubernetesApiAccess:
   - 1.1.1.0/24
   - pl-44444444
-  kubernetesVersion: 1.24.0
+  kubernetesVersion: 1.30.0
   masterKubelet:
     anonymousAuth: false
     cgroupDriver: systemd
@@ -207,7 +202,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
index ebacdc68c9c3f..6d65f448682f3 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
@@ -37,7 +37,6 @@ spec:
         - --cluster-name=complex.example.com
         - --concurrent-node-syncs=5
         - --configure-cloud-routes=false
-        - --enable-leader-migration=true
         - --leader-elect=true
         - --v=2
         - --cloud-provider=aws
@@ -46,7 +45,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
         imagePullPolicy: IfNotPresent
         name: aws-cloud-controller-manager
         resources:
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content
index 649a7f789ab1f..08ed651175327 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 316cdb35b3cb094c1de40fdb412e6e54338424413e9f11670e6000bc6c96e66b
+    manifestHash: 089edaf405acf6cc8220f17ca8af0189e13727c00000c5a77697cb482ab41eb5
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -26,13 +26,6 @@ spec:
     selector:
       k8s-addon: kubelet-api.rbac.addons.k8s.io
     version: 9.99.0
-  - id: k8s-1.23
-    manifest: leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml
-    manifestHash: b9c91e09c0f28c9b74ff140b8395d611834c627d698846d625c10975a74a48c4
-    name: leader-migration.rbac.addons.k8s.io
-    selector:
-      k8s-addon: leader-migration.rbac.addons.k8s.io
-    version: 9.99.0
   - manifest: limit-range.addons.k8s.io/v1.5.0.yaml
     manifestHash: 2d55c3bc5e354e84a3730a65b42f39aba630a59dc8d32b30859fcce3d3178bc2
     name: limit-range.addons.k8s.io
@@ -41,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
@@ -113,7 +106,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.18
     manifest: aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml
-    manifestHash: f5e8eb0f7ea5f67171220291b816bb70927047da82a309ec353c341aa80b7ee1
+    manifestHash: 6d17666b36b9b1d990ea5b8fd96aeb0cbfd06f60462734d07c54b4d44ea0293e
     name: aws-cloud-controller.addons.k8s.io
     selector:
       k8s-addon: aws-cloud-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 996ecec647356..6e75e591e7640 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
deleted file mode 100644
index 11ed6d46fd241..0000000000000
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
+++ /dev/null
@@ -1,52 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cloud-provider-extraction-migration
-  resources:
-  - leases
-  verbs:
-  - create
-  - list
-  - get
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: system::leader-locking-migration
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:kube-controller-manager
-- kind: ServiceAccount
-  name: kube-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: cloud-controller-manager
-  namespace: kube-system
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 5db4d5f918a13..90bd077e266c9 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 0877fef004c09..08c1f2b80a8d9 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-master-us-test-1a_content b/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
index 50def5846389c..398ec208d2a19 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
@@ -31,9 +31,8 @@ APIServerConfig:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -66,21 +65,23 @@ APIServerConfig:
     -----END RSA PUBLIC KEY-----
 Assets:
   amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
   - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
   - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
   - f90ed6dcef534e6d1ae17907dc7eb40614b8945ad4af7f0e98d2be7cde8165c6@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-amd64
   - 9992e7eb2a2e93f799e5a9e98eb718637433524bc65f630357201a79f49b13d0@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-amd64
   arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
   - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
   - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
@@ -249,18 +250,16 @@ ControlPlaneConfig:
     concurrentJobSyncs: 10
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
     useServiceAccountCredentials: true
   KubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -270,7 +269,7 @@ EtcdClusterNames:
 - events
 FileAssets:
 - content: |
-    apiVersion: kubescheduler.config.k8s.io/v1beta2
+    apiVersion: kubescheduler.config.k8s.io/v1
     clientConnection:
       kubeconfig: /var/lib/kube-scheduler/kubeconfig
     kind: KubeSchedulerConfiguration
@@ -290,7 +289,7 @@ KeypairIDs:
 KubeProxy:
   clusterCIDR: 100.96.0.0/11
   cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
+  image: registry.k8s.io/kube-proxy:v1.30.0
   logLevel: 2
 KubeletConfig:
   anonymousAuth: false
@@ -302,7 +301,6 @@ KubeletConfig:
   enableDebuggingHandlers: true
   evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
   featureGates:
-    CSIMigrationAWS: "true"
     InTreePluginAWSUnregister: "true"
   kubeconfigPath: /var/lib/kubelet/kubeconfig
   logLevel: 2
@@ -318,7 +316,7 @@ KubeletConfig:
   shutdownGracePeriodCriticalPods: 10s
   taints:
   - node-role.kubernetes.io/control-plane=:NoSchedule
-KubernetesVersion: 1.24.0
+KubernetesVersion: 1.30.0
 Networking:
   nonMasqueradeCIDR: 100.64.0.0/10
   serviceClusterIPRange: 100.64.0.0/13
@@ -332,8 +330,8 @@ configStore:
 containerdConfig:
   logLevel: info
   runc:
-    version: 1.1.5
-  version: 1.6.20
+    version: 1.1.12
+  version: 1.7.16
 etcdManifests:
 - memfs://clusters.example.com/complex.example.com/manifests/etcd/main-master-us-test-1a.yaml
 - memfs://clusters.example.com/complex.example.com/manifests/etcd/events-master-us-test-1a.yaml
diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-nodes_content b/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-nodes_content
index 2d281d8509dd6..06f65c6d6046a 100644
--- a/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-nodes_content
+++ b/tests/integration/update_cluster/complex/data/aws_s3_object_nodeupconfig-nodes_content
@@ -1,18 +1,20 @@
 Assets:
   amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
   - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
   - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
   arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
   - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
   - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
 CAs: {}
@@ -25,7 +27,7 @@ KeypairIDs:
 KubeProxy:
   clusterCIDR: 100.96.0.0/11
   cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
+  image: registry.k8s.io/kube-proxy:v1.30.0
   logLevel: 2
 KubeletConfig:
   anonymousAuth: false
@@ -37,7 +39,6 @@ KubeletConfig:
   enableDebuggingHandlers: true
   evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
   featureGates:
-    CSIMigrationAWS: "true"
     InTreePluginAWSUnregister: "true"
   kubeconfigPath: /var/lib/kubelet/kubeconfig
   logLevel: 2
@@ -49,7 +50,7 @@ KubeletConfig:
   registerSchedulable: true
   shutdownGracePeriod: 30s
   shutdownGracePeriodCriticalPods: 10s
-KubernetesVersion: 1.24.0
+KubernetesVersion: 1.30.0
 Networking:
   nonMasqueradeCIDR: 100.64.0.0/10
   serviceClusterIPRange: 100.64.0.0/13
@@ -58,8 +59,8 @@ UpdatePolicy: automatic
 containerdConfig:
   logLevel: info
   runc:
-    version: 1.1.5
-  version: 1.6.20
+    version: 1.1.12
+  version: 1.7.16
 packages:
 - nfs-common
 usesLegacyGossip: false
diff --git a/tests/integration/update_cluster/complex/in-legacy-v1alpha2.yaml b/tests/integration/update_cluster/complex/in-legacy-v1alpha2.yaml
index 64aef46ef75e2..1f26498b86d09 100644
--- a/tests/integration/update_cluster/complex/in-legacy-v1alpha2.yaml
+++ b/tests/integration/update_cluster/complex/in-legacy-v1alpha2.yaml
@@ -55,7 +55,7 @@ spec:
     concurrentJobSyncs: 10
   kubelet:
     anonymousAuth: false
-  kubernetesVersion: v1.24.0
+  kubernetesVersion: v1.30.0
   masterPublicName: api.complex.example.com
   networkCIDR: 172.20.0.0/16
   additionalNetworkCIDRs:
diff --git a/tests/integration/update_cluster/complex/in-v1alpha2.yaml b/tests/integration/update_cluster/complex/in-v1alpha2.yaml
index e3f815cfd337b..e2d27d5a8810f 100644
--- a/tests/integration/update_cluster/complex/in-v1alpha2.yaml
+++ b/tests/integration/update_cluster/complex/in-v1alpha2.yaml
@@ -55,7 +55,7 @@ spec:
     memoryLimit: 1000Mi
   kubelet:
     anonymousAuth: false
-  kubernetesVersion: v1.24.0
+  kubernetesVersion: v1.30.0
   masterPublicName: api.complex.example.com
   networkCIDR: 172.20.0.0/16
   additionalNetworkCIDRs:
diff --git a/tests/integration/update_cluster/complex/kubernetes.tf b/tests/integration/update_cluster/complex/kubernetes.tf
index d7ddb245a04d7..385254fc74385 100644
--- a/tests/integration/update_cluster/complex/kubernetes.tf
+++ b/tests/integration/update_cluster/complex/kubernetes.tf
@@ -575,7 +575,7 @@ resource "aws_launch_template" "nodes-complex-example-com" {
     http_endpoint               = "enabled"
     http_protocol_ipv6          = "disabled"
     http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
+    http_tokens                 = "required"
   }
   monitoring {
     enabled = true
@@ -875,14 +875,6 @@ resource "aws_s3_object" "complex-example-com-addons-kubelet-api-rbac-addons-k8s
   server_side_encryption = "AES256"
 }
 
-resource "aws_s3_object" "complex-example-com-addons-leader-migration-rbac-addons-k8s-io-k8s-1-23" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_complex.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content")
-  key                    = "clusters.example.com/complex.example.com/addons/leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
 resource "aws_s3_object" "complex-example-com-addons-limit-range-addons-k8s-io" {
   bucket                 = "testingBucket"
   content                = file("${path.module}/data/aws_s3_object_complex.example.com-addons-limit-range.addons.k8s.io_content")
diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content
index 9b995cc916b21..400c4e5091981 100644
--- a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: d40cb65ad20ee3d4ac78434baed9bfaebd6286ca79c41f328f5a8d4f524428f2
+    manifestHash: 8af3705691f757803f45193a2521d024a514011cdabeda51982d93266b10688b
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 7c6daa9f24756..79a0b4f536176 100644
--- a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 0f5108de259d4..75e5c459478ca 100644
--- a/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 412cc22608b00..306328a977220 100644
--- a/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/compress/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content
index ff179cfd7c237..ac81dc385ae44 100644
--- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 6131dcc896b2d75fe791c2fb36e07c9761388a3db7310682fb6b59eb34a054d4
+    manifestHash: 919656d9bf6b0a62258959293b3bcaa4f586e54664f10071459f729393024f70
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 291722b6e4ba7..8f25729f2d5dd 100644
--- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 11c1671fce8db..9d7644571ea83 100644
--- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 01525780eed19..32d79ea43c796 100644
--- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content
index ff179cfd7c237..ac81dc385ae44 100644
--- a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 6131dcc896b2d75fe791c2fb36e07c9761388a3db7310682fb6b59eb34a054d4
+    manifestHash: 919656d9bf6b0a62258959293b3bcaa4f586e54664f10071459f729393024f70
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 291722b6e4ba7..8f25729f2d5dd 100644
--- a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 11c1671fce8db..9d7644571ea83 100644
--- a/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 01525780eed19..32d79ea43c796 100644
--- a/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content
index 6619a7564c4bf..722de4420d839 100644
--- a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 3eb7510f82298a23ff0b6dde7806083bcd8bd112ee478dc881b0fb871d4d93d3
+    manifestHash: 25907a512a4f159bd293096389dbff890312aa7c024f9f9ae0224b166fe07c18
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 5411e8d14d064..a245453c58343 100644
--- a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 69169c27a9834..a0e94cf1bd73f 100644
--- a/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index d2b45777e52d4..a5786ac7fcb00 100644
--- a/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/digit/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content
index 0cad5ad130a4a..80d942e723bcc 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 1b99b2527c736af9e20ea8e649376590aaaae6db63cdd0b7903207317e422769
+    manifestHash: 99d0eff9acff8a14f418f9572c18540a7c5030998524b2d2c37163d18a02ce4f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4087aa4787d20..649c86e32687e 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6a7ee030ae2be..efae4230c09b6 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
index 6a7ee030ae2be..efae4230c09b6 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
index 6a7ee030ae2be..efae4230c09b6 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 62e85023161d9..f75a487d99d09 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
index 62e85023161d9..f75a487d99d09 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
index 62e85023161d9..f75a487d99d09 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content
index afcf964413887..36d8b521b9e13 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 4a304b38f7e5f7520ebe61425a07eae397fc0c157fa1729099bb782c2b58c5a6
+    manifestHash: 7cc26fad88011d2adc2a345fa06153982f3f4da6abfb8f144fbdf4d33259bd34
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index d9ef3ff3b35ab..b15231bb974c6 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 03931e8fa3dc4..b5e97d5404ee1 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
index 03931e8fa3dc4..b5e97d5404ee1 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
index 03931e8fa3dc4..b5e97d5404ee1 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index c2b481ade1991..403c974efef00 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
index c2b481ade1991..403c974efef00 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
index c2b481ade1991..403c974efef00 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 50fb2cc57f3a1..77c69c283ac5b 100644
--- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 0e9b6f5cadabb..050e72282dcb7 100644
--- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content
index 9cb2553846b03..177794899c918 100644
--- a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 6622e4b1fff95c0dd480a44f3559c11841172bb17073f2d0148e3acce54e4e40
+    manifestHash: 0775e089ef32330c7362d92f4c8688e1a710e50aacee4c63dfffac234d5385af
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 077f22074e4db..57080fa35e5a0 100644
--- a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index aa51d30a3f312..12dd314442e7a 100644
--- a/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index e28b41cec6ace..713bb9f0cb2d1 100644
--- a/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content
index 8d120e016308a..c6a7ee42e3600 100644
--- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 33983f059642cb0c289870b3ab0a96a2484e119c36dd417bb84008ab3ebf68b9
+    manifestHash: cb50d20ce4aafaf4553cf52b405539493c785e34180ebfa3b71eb118cd4c5ff8
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 489140f2387c2..7e021c23f0f29 100644
--- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 443a0f8811721..dbdaab5cd3340 100644
--- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index de770b20fc96d..fa35c5fd5eedb 100644
--- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content
index 935b7dd46e7a8..10ca6190f3e06 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7128ccd19700fb8c6b9fb2fe4c6927dacbb0c38f67b119bfd06408a77fac76eb
+    manifestHash: f83d3cde93c9d26076a9bbfbe9b07d6ebcdee03179c40d0aaabd40f37fc6d575
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 78161ea294b75..7d9d6c2500075 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 849aef5264b92..8232ab9f74907 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
index 849aef5264b92..8232ab9f74907 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
index 849aef5264b92..8232ab9f74907 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index d49cd1f0574b2..4bb660e01b4c8 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
index d49cd1f0574b2..4bb660e01b4c8 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
index d49cd1f0574b2..4bb660e01b4c8 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/ha/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-bootstrap_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-bootstrap_content
index fa983e742bf29..5afea9a68215b 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 3a4430cd126c17bcebada43953efda82f6a9c953527402becf08381e8b198207
+    manifestHash: 1b03fa909e155f7b7ad8933f984fe99e7055a6242e76007af6506b8f2d59ff07
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 5a3c3bb415226..6b595fb93bafe 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_ha-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index 8dea4e3c7ed1a..7c5a1aa73d381 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-b_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-b_content
index 8dea4e3c7ed1a..7c5a1aa73d381 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-b_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-b_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-c_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-c_content
index 8dea4e3c7ed1a..7c5a1aa73d381 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-c_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-c_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index 9f9a0df275df6..008b8c030b5f1 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-b_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-b_content
index 9f9a0df275df6..008b8c030b5f1 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-b_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-b_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-c_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-c_content
index 9f9a0df275df6..008b8c030b5f1 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-c_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-c_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/ha_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 8e2aee434d514..8a14b16e55713 100644
--- a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index d8cd48cf071e5..1e198b25400f0 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
+    manifestHash: 3950a960f29504cc3130b24f5a50281c88365ead305750886dedfaaf4cbd63cd
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 0322368ae45b7..e0f311486d676 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index ae4298b49d140..f376ad5b7130a 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
+    manifestHash: 3950a960f29504cc3130b24f5a50281c88365ead305750886dedfaaf4cbd63cd
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 0322368ae45b7..e0f311486d676 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/README.md b/tests/integration/update_cluster/many-addons-ccm-irsa24/README.md
deleted file mode 100644
index d173d34f98fd6..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/README.md
+++ /dev/null
@@ -1,9 +0,0 @@
-Simple test of (experimental) JWKS functionality
-
-We have to use a fixed CA because the fingerprint is inserted into the AWS WebIdentity configuration.
-
-ca.crt & ca.key generated with:
-
-```
-openssl req -new -newkey rsa:512 -days 3650 -nodes -x509 -subj "/CN=kubernetes" -keyout ca.key -out ca.crt -config <(cat /etc/ssl/openssl.cnf <(printf "[ v3_ca ]\nkeyUsage = critical,keyCertSign,cRLSign"))
-```
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index 6c18833de43c0..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "sts:AssumeRoleWithWebIdentity",
-      "Condition": {
-        "StringEquals": {
-          "discovery.example.com/minimal.example.com:sub": "system:serviceaccount:kube-system:aws-cloud-controller-manager"
-        }
-      },
-      "Effect": "Allow",
-      "Principal": {
-        "Federated": "arn:aws-test:iam::123456789012:oidc-provider/discovery.example.com/minimal.example.com"
-      }
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index 94a18743494c1..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "sts:AssumeRoleWithWebIdentity",
-      "Condition": {
-        "StringEquals": {
-          "discovery.example.com/minimal.example.com:sub": "system:serviceaccount:kube-system:aws-load-balancer-controller"
-        }
-      },
-      "Effect": "Allow",
-      "Principal": {
-        "Federated": "arn:aws-test:iam::123456789012:oidc-provider/discovery.example.com/minimal.example.com"
-      }
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index 3266f85030aab..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "sts:AssumeRoleWithWebIdentity",
-      "Condition": {
-        "StringEquals": {
-          "discovery.example.com/minimal.example.com:sub": "system:serviceaccount:kube-system:aws-node-termination-handler"
-        }
-      },
-      "Effect": "Allow",
-      "Principal": {
-        "Federated": "arn:aws-test:iam::123456789012:oidc-provider/discovery.example.com/minimal.example.com"
-      }
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_cluster-autoscaler.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_cluster-autoscaler.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index 6a4c8278048c0..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_cluster-autoscaler.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "sts:AssumeRoleWithWebIdentity",
-      "Condition": {
-        "StringEquals": {
-          "discovery.example.com/minimal.example.com:sub": "system:serviceaccount:kube-system:cluster-autoscaler"
-        }
-      },
-      "Effect": "Allow",
-      "Principal": {
-        "Federated": "arn:aws-test:iam::123456789012:oidc-provider/discovery.example.com/minimal.example.com"
-      }
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_dns-controller.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_dns-controller.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index a1f5c8e2f8b59..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_dns-controller.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "sts:AssumeRoleWithWebIdentity",
-      "Condition": {
-        "StringEquals": {
-          "discovery.example.com/minimal.example.com:sub": "system:serviceaccount:kube-system:dns-controller"
-        }
-      },
-      "Effect": "Allow",
-      "Principal": {
-        "Federated": "arn:aws-test:iam::123456789012:oidc-provider/discovery.example.com/minimal.example.com"
-      }
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index 6bd6048b16001..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "sts:AssumeRoleWithWebIdentity",
-      "Condition": {
-        "StringEquals": {
-          "discovery.example.com/minimal.example.com:sub": "system:serviceaccount:kube-system:ebs-csi-controller-sa"
-        }
-      },
-      "Effect": "Allow",
-      "Principal": {
-        "Federated": "arn:aws-test:iam::123456789012:oidc-provider/discovery.example.com/minimal.example.com"
-      }
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index d05670c1897e5..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,116 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "ec2:CreateTags",
-      "Condition": {
-        "StringEquals": {
-          "aws:RequestTag/KubernetesCluster": "minimal.example.com",
-          "ec2:CreateAction": [
-            "CreateSecurityGroup"
-          ]
-        }
-      },
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:security-group/*"
-      ]
-    },
-    {
-      "Action": [
-        "ec2:CreateTags",
-        "ec2:DeleteTags"
-      ],
-      "Condition": {
-        "Null": {
-          "aws:RequestTag/KubernetesCluster": "true"
-        },
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:security-group/*"
-      ]
-    },
-    {
-      "Action": [
-        "autoscaling:DescribeAutoScalingGroups",
-        "autoscaling:DescribeTags",
-        "ec2:DescribeAvailabilityZones",
-        "ec2:DescribeInstances",
-        "ec2:DescribeRegions",
-        "ec2:DescribeRouteTables",
-        "ec2:DescribeSecurityGroups",
-        "ec2:DescribeSubnets",
-        "ec2:DescribeVpcs",
-        "elasticloadbalancing:DescribeListeners",
-        "elasticloadbalancing:DescribeLoadBalancerAttributes",
-        "elasticloadbalancing:DescribeLoadBalancerPolicies",
-        "elasticloadbalancing:DescribeLoadBalancers",
-        "elasticloadbalancing:DescribeTargetGroups",
-        "elasticloadbalancing:DescribeTargetHealth",
-        "iam:CreateServiceLinkedRole",
-        "kms:DescribeKey"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": [
-        "ec2:AuthorizeSecurityGroupIngress",
-        "ec2:DeleteSecurityGroup",
-        "ec2:ModifyInstanceAttribute",
-        "ec2:RevokeSecurityGroupIngress",
-        "elasticloadbalancing:AddTags",
-        "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
-        "elasticloadbalancing:AttachLoadBalancerToSubnets",
-        "elasticloadbalancing:ConfigureHealthCheck",
-        "elasticloadbalancing:CreateLoadBalancerListeners",
-        "elasticloadbalancing:CreateLoadBalancerPolicy",
-        "elasticloadbalancing:DeleteListener",
-        "elasticloadbalancing:DeleteLoadBalancer",
-        "elasticloadbalancing:DeleteLoadBalancerListeners",
-        "elasticloadbalancing:DeleteTargetGroup",
-        "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
-        "elasticloadbalancing:DeregisterTargets",
-        "elasticloadbalancing:DetachLoadBalancerFromSubnets",
-        "elasticloadbalancing:ModifyListener",
-        "elasticloadbalancing:ModifyLoadBalancerAttributes",
-        "elasticloadbalancing:ModifyTargetGroup",
-        "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
-        "elasticloadbalancing:RegisterTargets",
-        "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
-        "elasticloadbalancing:SetLoadBalancerPoliciesOfListener"
-      ],
-      "Condition": {
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": [
-        "ec2:CreateSecurityGroup",
-        "elasticloadbalancing:CreateListener",
-        "elasticloadbalancing:CreateLoadBalancer",
-        "elasticloadbalancing:CreateTargetGroup"
-      ],
-      "Condition": {
-        "StringEquals": {
-          "aws:RequestTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": "ec2:CreateSecurityGroup",
-      "Effect": "Allow",
-      "Resource": "arn:aws-test:ec2:*:*:vpc/*"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index e141f8b925c99..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,118 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "ec2:CreateTags",
-      "Condition": {
-        "StringEquals": {
-          "aws:RequestTag/KubernetesCluster": "minimal.example.com",
-          "ec2:CreateAction": [
-            "CreateSecurityGroup"
-          ]
-        }
-      },
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:security-group/*"
-      ]
-    },
-    {
-      "Action": [
-        "ec2:CreateTags",
-        "ec2:DeleteTags"
-      ],
-      "Condition": {
-        "Null": {
-          "aws:RequestTag/KubernetesCluster": "true"
-        },
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:security-group/*"
-      ]
-    },
-    {
-      "Action": [
-        "acm:DescribeCertificate",
-        "acm:ListCertificates",
-        "cognito-idp:DescribeUserPoolClient",
-        "ec2:DescribeAccountAttributes",
-        "ec2:DescribeAvailabilityZones",
-        "ec2:DescribeInstances",
-        "ec2:DescribeInternetGateways",
-        "ec2:DescribeNetworkInterfaces",
-        "ec2:DescribeSecurityGroups",
-        "ec2:DescribeSubnets",
-        "ec2:DescribeVpcPeeringConnections",
-        "ec2:DescribeVpcs",
-        "elasticloadbalancing:DescribeListenerCertificates",
-        "elasticloadbalancing:DescribeListeners",
-        "elasticloadbalancing:DescribeLoadBalancerAttributes",
-        "elasticloadbalancing:DescribeLoadBalancers",
-        "elasticloadbalancing:DescribeRules",
-        "elasticloadbalancing:DescribeTags",
-        "elasticloadbalancing:DescribeTargetGroupAttributes",
-        "elasticloadbalancing:DescribeTargetGroups",
-        "elasticloadbalancing:DescribeTargetHealth"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": [
-        "ec2:AuthorizeSecurityGroupIngress",
-        "ec2:DeleteSecurityGroup",
-        "ec2:RevokeSecurityGroupIngress",
-        "elasticloadbalancing:AddListenerCertificates",
-        "elasticloadbalancing:AddTags",
-        "elasticloadbalancing:DeleteListener",
-        "elasticloadbalancing:DeleteLoadBalancer",
-        "elasticloadbalancing:DeleteRule",
-        "elasticloadbalancing:DeleteTargetGroup",
-        "elasticloadbalancing:DeregisterTargets",
-        "elasticloadbalancing:ModifyListener",
-        "elasticloadbalancing:ModifyLoadBalancerAttributes",
-        "elasticloadbalancing:ModifyRule",
-        "elasticloadbalancing:ModifyTargetGroup",
-        "elasticloadbalancing:ModifyTargetGroupAttributes",
-        "elasticloadbalancing:RegisterTargets",
-        "elasticloadbalancing:RemoveListenerCertificates",
-        "elasticloadbalancing:RemoveTags",
-        "elasticloadbalancing:SetIpAddressType",
-        "elasticloadbalancing:SetSecurityGroups",
-        "elasticloadbalancing:SetSubnets"
-      ],
-      "Condition": {
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": [
-        "ec2:CreateSecurityGroup",
-        "elasticloadbalancing:CreateListener",
-        "elasticloadbalancing:CreateLoadBalancer",
-        "elasticloadbalancing:CreateRule",
-        "elasticloadbalancing:CreateTargetGroup"
-      ],
-      "Condition": {
-        "StringEquals": {
-          "aws:RequestTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": "ec2:CreateSecurityGroup",
-      "Effect": "Allow",
-      "Resource": "arn:aws-test:ec2:*:*:vpc/*"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index a2a9cfce2edb2..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": [
-        "autoscaling:DescribeAutoScalingInstances",
-        "autoscaling:DescribeTags",
-        "ec2:DescribeInstances",
-        "sqs:DeleteMessage",
-        "sqs:ReceiveMessage"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": "autoscaling:CompleteLifecycleAction",
-      "Condition": {
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_cluster-autoscaler.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_cluster-autoscaler.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index 5799e66dca779..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_cluster-autoscaler.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": [
-        "autoscaling:DescribeAutoScalingGroups",
-        "autoscaling:DescribeAutoScalingInstances",
-        "autoscaling:DescribeLaunchConfigurations",
-        "autoscaling:DescribeScalingActivities",
-        "ec2:DescribeInstanceTypes",
-        "ec2:DescribeLaunchTemplateVersions"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": [
-        "autoscaling:SetDesiredCapacity",
-        "autoscaling:TerminateInstanceInAutoScalingGroup"
-      ],
-      "Condition": {
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_dns-controller.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_dns-controller.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index c3f164caee182..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_dns-controller.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": [
-        "route53:ChangeResourceRecordSets",
-        "route53:GetHostedZone",
-        "route53:ListResourceRecordSets"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:route53:::hostedzone/Z1AFAKE1ZON3YO"
-      ]
-    },
-    {
-      "Action": [
-        "route53:GetChange"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:route53:::change/*"
-      ]
-    },
-    {
-      "Action": [
-        "route53:ListHostedZones",
-        "route53:ListTagsForResource"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "*"
-      ]
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy
deleted file mode 100644
index 5dd615cd76fbe..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy
+++ /dev/null
@@ -1,91 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "ec2:CreateTags",
-      "Condition": {
-        "StringEquals": {
-          "aws:RequestTag/KubernetesCluster": "minimal.example.com",
-          "ec2:CreateAction": [
-            "CreateVolume",
-            "CreateSnapshot"
-          ]
-        }
-      },
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:snapshot/*",
-        "arn:aws-test:ec2:*:*:volume/*"
-      ]
-    },
-    {
-      "Action": [
-        "ec2:CreateTags",
-        "ec2:DeleteTags"
-      ],
-      "Condition": {
-        "Null": {
-          "aws:RequestTag/KubernetesCluster": "true"
-        },
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:snapshot/*",
-        "arn:aws-test:ec2:*:*:volume/*"
-      ]
-    },
-    {
-      "Action": [
-        "ec2:CreateSnapshot",
-        "ec2:DescribeAccountAttributes",
-        "ec2:DescribeAvailabilityZones",
-        "ec2:DescribeInstances",
-        "ec2:DescribeSnapshots",
-        "ec2:DescribeTags",
-        "ec2:DescribeVolumes",
-        "ec2:DescribeVolumesModifications",
-        "kms:CreateGrant",
-        "kms:Decrypt",
-        "kms:DescribeKey",
-        "kms:Encrypt",
-        "kms:GenerateDataKey*",
-        "kms:ReEncrypt*"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": [
-        "ec2:AttachVolume",
-        "ec2:DeleteSnapshot",
-        "ec2:DeleteVolume",
-        "ec2:DetachVolume",
-        "ec2:ModifyInstanceAttribute",
-        "ec2:ModifyVolume"
-      ],
-      "Condition": {
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    },
-    {
-      "Action": [
-        "ec2:CreateSnapshot",
-        "ec2:CreateVolume"
-      ],
-      "Condition": {
-        "StringEquals": {
-          "aws:RequestTag/KubernetesCluster": "minimal.example.com"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": "*"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_masters.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_masters.minimal.example.com_policy
deleted file mode 100644
index d6666452b057c..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_masters.minimal.example.com_policy
+++ /dev/null
@@ -1,137 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "ec2:AttachVolume",
-      "Condition": {
-        "StringEquals": {
-          "aws:ResourceTag/KubernetesCluster": "minimal.example.com",
-          "aws:ResourceTag/k8s.io/role/master": "1"
-        }
-      },
-      "Effect": "Allow",
-      "Resource": [
-        "*"
-      ]
-    },
-    {
-      "Action": [
-        "s3:Get*"
-      ],
-      "Effect": "Allow",
-      "Resource": "arn:aws-test:s3:::placeholder-read-bucket/clusters.example.com/minimal.example.com/*"
-    },
-    {
-      "Action": [
-        "s3:DeleteObject",
-        "s3:DeleteObjectVersion",
-        "s3:GetObject",
-        "s3:PutObject"
-      ],
-      "Effect": "Allow",
-      "Resource": "arn:aws-test:s3:::placeholder-write-bucket/clusters.example.com/minimal.example.com/backups/etcd/main/*"
-    },
-    {
-      "Action": [
-        "s3:DeleteObject",
-        "s3:DeleteObjectVersion",
-        "s3:GetObject",
-        "s3:PutObject"
-      ],
-      "Effect": "Allow",
-      "Resource": "arn:aws-test:s3:::placeholder-write-bucket/clusters.example.com/minimal.example.com/backups/etcd/events/*"
-    },
-    {
-      "Action": [
-        "s3:GetBucketLocation",
-        "s3:GetEncryptionConfiguration",
-        "s3:ListBucket",
-        "s3:ListBucketVersions"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:s3:::placeholder-read-bucket"
-      ]
-    },
-    {
-      "Action": [
-        "s3:GetBucketLocation",
-        "s3:GetEncryptionConfiguration",
-        "s3:ListBucket",
-        "s3:ListBucketVersions"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:s3:::placeholder-write-bucket"
-      ]
-    },
-    {
-      "Action": [
-        "route53:ChangeResourceRecordSets",
-        "route53:GetHostedZone",
-        "route53:ListResourceRecordSets"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:route53:::hostedzone/Z1AFAKE1ZON3YO"
-      ]
-    },
-    {
-      "Action": [
-        "route53:GetChange"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:route53:::change/*"
-      ]
-    },
-    {
-      "Action": [
-        "route53:ListHostedZones",
-        "route53:ListTagsForResource"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "*"
-      ]
-    },
-    {
-      "Action": [
-        "ec2:CreateTags"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:network-interface/*"
-      ]
-    },
-    {
-      "Action": [
-        "autoscaling:DescribeAutoScalingInstances",
-        "ec2:AssignPrivateIpAddresses",
-        "ec2:AttachNetworkInterface",
-        "ec2:CreateNetworkInterface",
-        "ec2:DeleteNetworkInterface",
-        "ec2:DescribeInstanceTypes",
-        "ec2:DescribeInstances",
-        "ec2:DescribeNetworkInterfaces",
-        "ec2:DescribeRegions",
-        "ec2:DescribeTags",
-        "ec2:DescribeVolumes",
-        "ec2:DetachNetworkInterface",
-        "ec2:ModifyNetworkInterfaceAttribute",
-        "ec2:UnassignPrivateIpAddresses",
-        "iam:GetServerCertificate",
-        "iam:ListServerCertificates",
-        "kms:CreateGrant",
-        "kms:Decrypt",
-        "kms:DescribeKey",
-        "kms:Encrypt",
-        "kms:GenerateDataKey*",
-        "kms:GenerateRandom",
-        "kms:ReEncrypt*"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_nodes.minimal.example.com_policy b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_nodes.minimal.example.com_policy
deleted file mode 100644
index d18bc3afc1c35..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_policy_nodes.minimal.example.com_policy
+++ /dev/null
@@ -1,48 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": [
-        "s3:GetBucketLocation",
-        "s3:GetEncryptionConfiguration",
-        "s3:ListBucket",
-        "s3:ListBucketVersions"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:s3:::placeholder-read-bucket"
-      ]
-    },
-    {
-      "Action": [
-        "ec2:CreateTags"
-      ],
-      "Effect": "Allow",
-      "Resource": [
-        "arn:aws-test:ec2:*:*:network-interface/*"
-      ]
-    },
-    {
-      "Action": [
-        "autoscaling:DescribeAutoScalingInstances",
-        "ec2:AssignPrivateIpAddresses",
-        "ec2:AttachNetworkInterface",
-        "ec2:CreateNetworkInterface",
-        "ec2:DeleteNetworkInterface",
-        "ec2:DescribeInstanceTypes",
-        "ec2:DescribeInstances",
-        "ec2:DescribeNetworkInterfaces",
-        "ec2:DescribeRegions",
-        "ec2:DescribeTags",
-        "ec2:DetachNetworkInterface",
-        "ec2:ModifyNetworkInterfaceAttribute",
-        "ec2:UnassignPrivateIpAddresses",
-        "iam:GetServerCertificate",
-        "iam:ListServerCertificates",
-        "kms:GenerateRandom"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
deleted file mode 100644
index 5239db5555c4f..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
+++ /dev/null
@@ -1,138 +0,0 @@
-#!/bin/bash
-set -o errexit
-set -o nounset
-set -o pipefail
-
-NODEUP_URL_AMD64=https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/nodeup,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/nodeup-linux-amd64
-NODEUP_HASH_AMD64=585fbda0f0a43184656b4bfc0cc5f0c0b85612faf43b8816acca1f99d422c924
-NODEUP_URL_ARM64=https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/nodeup,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/nodeup-linux-arm64
-NODEUP_HASH_ARM64=7603675379699105a9b9915ff97718ea99b1bbb01a4c184e2f827c8a96e8e865
-
-export AWS_REGION=us-test-1
-
-
-
-
-sysctl -w net.core.rmem_max=16777216 || true
-sysctl -w net.core.wmem_max=16777216 || true
-sysctl -w net.ipv4.tcp_rmem='4096 87380 16777216' || true
-sysctl -w net.ipv4.tcp_wmem='4096 87380 16777216' || true
-
-
-function ensure-install-dir() {
-  INSTALL_DIR="/opt/kops"
-  # On ContainerOS, we install under /var/lib/toolbox; /opt is ro and noexec
-  if [[ -d /var/lib/toolbox ]]; then
-    INSTALL_DIR="/var/lib/toolbox/kops"
-  fi
-  mkdir -p ${INSTALL_DIR}/bin
-  mkdir -p ${INSTALL_DIR}/conf
-  cd ${INSTALL_DIR}
-}
-
-# Retry a download until we get it. args: name, sha, urls
-download-or-bust() {
-  echo "== Downloading $1 with hash $2 from $3 =="
-  local -r file="$1"
-  local -r hash="$2"
-  local -a urls
-  mapfile -t urls < <(split-commas "$3")
-
-  if [[ -f "${file}" ]]; then
-    if ! validate-hash "${file}" "${hash}"; then
-      rm -f "${file}"
-    else
-      return 0
-    fi
-  fi
-
-  while true; do
-    for url in "${urls[@]}"; do
-      commands=(
-        "curl -f --compressed -Lo ${file} --connect-timeout 20 --retry 6 --retry-delay 10"
-        "wget --compression=auto -O ${file} --connect-timeout=20 --tries=6 --wait=10"
-        "curl -f -Lo ${file} --connect-timeout 20 --retry 6 --retry-delay 10"
-        "wget -O ${file} --connect-timeout=20 --tries=6 --wait=10"
-      )
-      for cmd in "${commands[@]}"; do
-        echo "== Downloading ${url} using ${cmd} =="
-        if ! (${cmd} "${url}"); then
-          echo "== Failed to download ${url} using ${cmd} =="
-          continue
-        fi
-        if ! validate-hash "${file}" "${hash}"; then
-          echo "== Failed to validate hash for ${url} =="
-          rm -f "${file}"
-        else
-          echo "== Downloaded ${url} with hash ${hash} =="
-          return 0
-        fi
-      done
-    done
-
-    echo "== All downloads failed; sleeping before retrying =="
-    sleep 60
-  done
-}
-
-validate-hash() {
-  local -r file="$1"
-  local -r expected="$2"
-  local actual
-
-  actual=$(sha256sum "${file}" | awk '{ print $1 }') || true
-  if [[ "${actual}" != "${expected}" ]]; then
-    echo "== File ${file} is corrupted; hash ${actual} doesn't match expected ${expected} =="
-    return 1
-  fi
-}
-
-function split-commas() {
-  echo "$1" | tr "," "\n"
-}
-
-function download-release() {
-  case "$(uname -m)" in
-  x86_64*|i?86_64*|amd64*)
-    NODEUP_URL="${NODEUP_URL_AMD64}"
-    NODEUP_HASH="${NODEUP_HASH_AMD64}"
-    ;;
-  aarch64*|arm64*)
-    NODEUP_URL="${NODEUP_URL_ARM64}"
-    NODEUP_HASH="${NODEUP_HASH_ARM64}"
-    ;;
-  *)
-    echo "Unsupported host arch: $(uname -m)" >&2
-    exit 1
-    ;;
-  esac
-
-  cd ${INSTALL_DIR}/bin
-  download-or-bust nodeup "${NODEUP_HASH}" "${NODEUP_URL}"
-
-  chmod +x nodeup
-
-  echo "== Running nodeup =="
-  # We can't run in the foreground because of https://github.com/docker/docker/issues/23793
-  ( cd ${INSTALL_DIR}/bin; ./nodeup --install-systemd-unit --conf=${INSTALL_DIR}/conf/kube_env.yaml --v=8  )
-}
-
-####################################################################################
-
-/bin/systemd-machine-id-setup || echo "== Failed to initialize the machine ID; ensure machine-id configured =="
-
-echo "== nodeup node config starting =="
-ensure-install-dir
-
-cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
-CloudProvider: aws
-ClusterName: minimal.example.com
-ConfigBase: memfs://clusters.example.com/minimal.example.com
-InstanceGroupName: master-us-test-1a
-InstanceGroupRole: ControlPlane
-NodeupConfigHash: ux2Gv6SJT0pQJ8pGtLt0HSWPY9I74WrWc1fd4ALKbyE=
-
-__EOF_KUBE_ENV
-
-download-release
-echo "== nodeup node config done =="
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_nodes.minimal.example.com_user_data b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_nodes.minimal.example.com_user_data
deleted file mode 100644
index 6d28870e95eb4..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_launch_template_nodes.minimal.example.com_user_data
+++ /dev/null
@@ -1,161 +0,0 @@
-#!/bin/bash
-set -o errexit
-set -o nounset
-set -o pipefail
-
-NODEUP_URL_AMD64=https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/nodeup,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/nodeup-linux-amd64
-NODEUP_HASH_AMD64=585fbda0f0a43184656b4bfc0cc5f0c0b85612faf43b8816acca1f99d422c924
-NODEUP_URL_ARM64=https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/nodeup,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/nodeup-linux-arm64
-NODEUP_HASH_ARM64=7603675379699105a9b9915ff97718ea99b1bbb01a4c184e2f827c8a96e8e865
-
-export AWS_REGION=us-test-1
-
-
-
-
-sysctl -w net.core.rmem_max=16777216 || true
-sysctl -w net.core.wmem_max=16777216 || true
-sysctl -w net.ipv4.tcp_rmem='4096 87380 16777216' || true
-sysctl -w net.ipv4.tcp_wmem='4096 87380 16777216' || true
-
-
-function ensure-install-dir() {
-  INSTALL_DIR="/opt/kops"
-  # On ContainerOS, we install under /var/lib/toolbox; /opt is ro and noexec
-  if [[ -d /var/lib/toolbox ]]; then
-    INSTALL_DIR="/var/lib/toolbox/kops"
-  fi
-  mkdir -p ${INSTALL_DIR}/bin
-  mkdir -p ${INSTALL_DIR}/conf
-  cd ${INSTALL_DIR}
-}
-
-# Retry a download until we get it. args: name, sha, urls
-download-or-bust() {
-  echo "== Downloading $1 with hash $2 from $3 =="
-  local -r file="$1"
-  local -r hash="$2"
-  local -a urls
-  mapfile -t urls < <(split-commas "$3")
-
-  if [[ -f "${file}" ]]; then
-    if ! validate-hash "${file}" "${hash}"; then
-      rm -f "${file}"
-    else
-      return 0
-    fi
-  fi
-
-  while true; do
-    for url in "${urls[@]}"; do
-      commands=(
-        "curl -f --compressed -Lo ${file} --connect-timeout 20 --retry 6 --retry-delay 10"
-        "wget --compression=auto -O ${file} --connect-timeout=20 --tries=6 --wait=10"
-        "curl -f -Lo ${file} --connect-timeout 20 --retry 6 --retry-delay 10"
-        "wget -O ${file} --connect-timeout=20 --tries=6 --wait=10"
-      )
-      for cmd in "${commands[@]}"; do
-        echo "== Downloading ${url} using ${cmd} =="
-        if ! (${cmd} "${url}"); then
-          echo "== Failed to download ${url} using ${cmd} =="
-          continue
-        fi
-        if ! validate-hash "${file}" "${hash}"; then
-          echo "== Failed to validate hash for ${url} =="
-          rm -f "${file}"
-        else
-          echo "== Downloaded ${url} with hash ${hash} =="
-          return 0
-        fi
-      done
-    done
-
-    echo "== All downloads failed; sleeping before retrying =="
-    sleep 60
-  done
-}
-
-validate-hash() {
-  local -r file="$1"
-  local -r expected="$2"
-  local actual
-
-  actual=$(sha256sum "${file}" | awk '{ print $1 }') || true
-  if [[ "${actual}" != "${expected}" ]]; then
-    echo "== File ${file} is corrupted; hash ${actual} doesn't match expected ${expected} =="
-    return 1
-  fi
-}
-
-function split-commas() {
-  echo "$1" | tr "," "\n"
-}
-
-function download-release() {
-  case "$(uname -m)" in
-  x86_64*|i?86_64*|amd64*)
-    NODEUP_URL="${NODEUP_URL_AMD64}"
-    NODEUP_HASH="${NODEUP_HASH_AMD64}"
-    ;;
-  aarch64*|arm64*)
-    NODEUP_URL="${NODEUP_URL_ARM64}"
-    NODEUP_HASH="${NODEUP_HASH_ARM64}"
-    ;;
-  *)
-    echo "Unsupported host arch: $(uname -m)" >&2
-    exit 1
-    ;;
-  esac
-
-  cd ${INSTALL_DIR}/bin
-  download-or-bust nodeup "${NODEUP_HASH}" "${NODEUP_URL}"
-
-  chmod +x nodeup
-
-  echo "== Running nodeup =="
-  # We can't run in the foreground because of https://github.com/docker/docker/issues/23793
-  ( cd ${INSTALL_DIR}/bin; ./nodeup --install-systemd-unit --conf=${INSTALL_DIR}/conf/kube_env.yaml --v=8  )
-}
-
-####################################################################################
-
-/bin/systemd-machine-id-setup || echo "== Failed to initialize the machine ID; ensure machine-id configured =="
-
-echo "== nodeup node config starting =="
-ensure-install-dir
-
-cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
-CloudProvider: aws
-ClusterName: minimal.example.com
-ConfigServer:
-  CACertificates: |
-    -----BEGIN CERTIFICATE-----
-    MIIBbjCCARigAwIBAgIMFpANqBD8NSD82AUSMA0GCSqGSIb3DQEBCwUAMBgxFjAU
-    BgNVBAMTDWt1YmVybmV0ZXMtY2EwHhcNMjEwNzA3MDcwODAwWhcNMzEwNzA3MDcw
-    ODAwWjAYMRYwFAYDVQQDEw1rdWJlcm5ldGVzLWNhMFwwDQYJKoZIhvcNAQEBBQAD
-    SwAwSAJBANFI3zr0Tk8krsW8vwjfMpzJOlWQ8616vG3YPa2qAgI7V4oKwfV0yIg1
-    jt+H6f4P/wkPAPTPTfRp9Iy8oHEEFw0CAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEG
-    MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNG3zVjTcLlJwDsJ4/K9DV7KohUA
-    MA0GCSqGSIb3DQEBCwUAA0EAB8d03fY2w7WKpfO29qI295pu2C4ca9AiVGOpgSc8
-    tmQsq6rcxt3T+rb589PVtz0mw/cKTxOk6gH2CCC+yHfy2w==
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBbjCCARigAwIBAgIMFpANvmSa0OAlYmXKMA0GCSqGSIb3DQEBCwUAMBgxFjAU
-    BgNVBAMTDWt1YmVybmV0ZXMtY2EwHhcNMjEwNzA3MDcwOTM2WhcNMzEwNzA3MDcw
-    OTM2WjAYMRYwFAYDVQQDEw1rdWJlcm5ldGVzLWNhMFwwDQYJKoZIhvcNAQEBBQAD
-    SwAwSAJBAMF6F4aZdpe0RUpyykaBpWwZCnwbffhYGOw+fs6RdLuUq7QCNmJm/Eq7
-    WWOziMYDiI9SbclpD+6QiJ0N3EqppVUCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEG
-    MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFLImp6ARjPDAH6nhI+scWVt3Q9bn
-    MA0GCSqGSIb3DQEBCwUAA0EAVQVx5MUtuAIeePuP9o51xtpT2S6Fvfi8J4ICxnlA
-    9B7UD2ushcVFPtaeoL9Gfu8aY4KJBeqqg5ojl4qmRnThjw==
-    -----END CERTIFICATE-----
-  servers:
-  - https://kops-controller.internal.minimal.example.com:3988/
-InstanceGroupName: nodes
-InstanceGroupRole: Node
-NodeupConfigHash: jkV6U+7m7maglk9GeBC3AH+4BLxZa6wQfVhNAyfiB4U=
-
-__EOF_KUBE_ENV
-
-download-release
-echo "== nodeup node config done =="
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_cluster-completed.spec_content
deleted file mode 100644
index 35a45bd9ce64d..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_cluster-completed.spec_content
+++ /dev/null
@@ -1,246 +0,0 @@
-apiVersion: kops.k8s.io/v1alpha2
-kind: Cluster
-metadata:
-  creationTimestamp: "2016-12-10T22:42:27Z"
-  name: minimal.example.com
-spec:
-  api:
-    dns: {}
-  authorization:
-    alwaysAllow: {}
-  awsLoadBalancerController:
-    enabled: true
-  certManager:
-    enabled: true
-  channel: stable
-  cloudConfig:
-    awsEBSCSIDriver:
-      version: v1.30.0
-    manageStorageClasses: true
-  cloudControllerManager:
-    allocateNodeCIDRs: true
-    cloudProvider: aws
-    clusterCIDR: 172.20.128.0/17
-    clusterName: minimal.example.com
-    configureCloudRoutes: false
-    enableLeaderMigration: true
-    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
-    leaderElection:
-      leaderElect: true
-  cloudProvider: aws
-  clusterAutoscaler:
-    awsUseStaticInstanceList: false
-    balanceSimilarNodeGroups: false
-    enabled: true
-    expander: random
-    ignoreDaemonSetsUtilization: false
-    image: registry.k8s.io/autoscaling/cluster-autoscaler:v1.24.3
-    maxNodeProvisionTime: 15m0s
-    newPodScaleUpDelay: 0s
-    scaleDownDelayAfterAdd: 10m0s
-    scaleDownUnneededTime: 10m0s
-    scaleDownUnreadyTime: 20m0s
-    scaleDownUtilizationThreshold: "0.5"
-    skipNodesWithCustomControllerPods: true
-    skipNodesWithLocalStorage: true
-    skipNodesWithSystemPods: true
-  clusterDNSDomain: cluster.local
-  configBase: memfs://clusters.example.com/minimal.example.com
-  containerd:
-    logLevel: info
-    runc:
-      version: 1.1.5
-    version: 1.6.20
-  dnsZone: Z1AFAKE1ZON3YO
-  etcdClusters:
-  - backups:
-      backupStore: memfs://clusters.example.com/minimal.example.com/backups/etcd/main
-    etcdMembers:
-    - instanceGroup: master-us-test-1a
-      name: us-test-1a
-    manager:
-      backupRetentionDays: 90
-    name: main
-    version: 3.5.13
-  - backups:
-      backupStore: memfs://clusters.example.com/minimal.example.com/backups/etcd/events
-    etcdMembers:
-    - instanceGroup: master-us-test-1a
-      name: us-test-1a
-    manager:
-      backupRetentionDays: 90
-    name: events
-    version: 3.5.13
-  externalDns:
-    provider: dns-controller
-  iam:
-    legacy: false
-    useServiceAccountExternalPermissions: true
-  keyStore: memfs://clusters.example.com/minimal.example.com/pki
-  kubeAPIServer:
-    allowPrivileged: true
-    anonymousAuth: false
-    apiAudiences:
-    - kubernetes.svc.default
-    apiServerCount: 1
-    authorizationMode: AlwaysAllow
-    bindAddress: 0.0.0.0
-    cloudProvider: external
-    enableAdmissionPlugins:
-    - NamespaceLifecycle
-    - LimitRanger
-    - ServiceAccount
-    - DefaultStorageClass
-    - DefaultTolerationSeconds
-    - MutatingAdmissionWebhook
-    - ValidatingAdmissionWebhook
-    - NodeRestriction
-    - ResourceQuota
-    enableAggregatorRouting: true
-    etcdServers:
-    - https://127.0.0.1:4001
-    etcdServersOverrides:
-    - /events#https://127.0.0.1:4002
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
-    kubeletPreferredAddressTypes:
-    - InternalIP
-    - Hostname
-    - ExternalIP
-    logLevel: 2
-    requestheaderAllowedNames:
-    - aggregator
-    requestheaderExtraHeaderPrefixes:
-    - X-Remote-Extra-
-    requestheaderGroupHeaders:
-    - X-Remote-Group
-    requestheaderUsernameHeaders:
-    - X-Remote-User
-    securePort: 443
-    serviceAccountIssuer: https://discovery.example.com/minimal.example.com
-    serviceAccountJWKSURI: https://discovery.example.com/minimal.example.com/openid/v1/jwks
-    serviceClusterIPRange: 100.64.0.0/13
-    storageBackend: etcd3
-  kubeControllerManager:
-    allocateNodeCIDRs: true
-    attachDetachReconcileSyncPeriod: 1m0s
-    cloudProvider: external
-    clusterCIDR: 172.20.128.0/17
-    clusterName: minimal.example.com
-    configureCloudRoutes: false
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
-    leaderElection:
-      leaderElect: true
-    logLevel: 2
-    useServiceAccountCredentials: true
-  kubeDNS:
-    cacheMaxConcurrent: 150
-    cacheMaxSize: 1000
-    cpuRequest: 100m
-    domain: cluster.local
-    memoryLimit: 170Mi
-    memoryRequest: 70Mi
-    nodeLocalDNS:
-      cpuRequest: 25m
-      enabled: false
-      image: registry.k8s.io/dns/k8s-dns-node-cache:1.23.0
-      memoryRequest: 5Mi
-    provider: CoreDNS
-    serverIP: 100.64.0.10
-  kubeProxy:
-    cpuRequest: 100m
-    image: registry.k8s.io/kube-proxy:v1.24.0
-    logLevel: 2
-  kubeScheduler:
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
-    leaderElection:
-      leaderElect: true
-    logLevel: 2
-  kubelet:
-    anonymousAuth: false
-    cgroupDriver: systemd
-    cgroupRoot: /
-    cloudProvider: external
-    clusterDNS: 100.64.0.10
-    clusterDomain: cluster.local
-    enableDebuggingHandlers: true
-    evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    kubeconfigPath: /var/lib/kubelet/kubeconfig
-    logLevel: 2
-    podInfraContainerImage: registry.k8s.io/pause:3.9
-    podManifestPath: /etc/kubernetes/manifests
-    protectKernelDefaults: true
-    registerSchedulable: true
-    shutdownGracePeriod: 0s
-    shutdownGracePeriodCriticalPods: 0s
-  kubernetesApiAccess:
-  - 0.0.0.0/0
-  kubernetesVersion: 1.24.0
-  masterKubelet:
-    anonymousAuth: false
-    cgroupDriver: systemd
-    cgroupRoot: /
-    cloudProvider: external
-    clusterDNS: 100.64.0.10
-    clusterDomain: cluster.local
-    enableDebuggingHandlers: true
-    evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    kubeconfigPath: /var/lib/kubelet/kubeconfig
-    logLevel: 2
-    podInfraContainerImage: registry.k8s.io/pause:3.9
-    podManifestPath: /etc/kubernetes/manifests
-    protectKernelDefaults: true
-    registerSchedulable: true
-    shutdownGracePeriod: 0s
-    shutdownGracePeriodCriticalPods: 0s
-  masterPublicName: api.minimal.example.com
-  metricsServer:
-    enabled: true
-  networkCIDR: 172.20.0.0/16
-  networking:
-    amazonvpc: {}
-  nodeTerminationHandler:
-    cpuRequest: 50m
-    enableRebalanceDraining: false
-    enableRebalanceMonitoring: false
-    enableScheduledEventDraining: true
-    enableSpotInterruptionDraining: true
-    enabled: true
-    excludeFromLoadBalancers: true
-    managedASGTag: aws-node-termination-handler/managed
-    memoryRequest: 64Mi
-    prometheusEnable: false
-    version: v1.18.3
-  nonMasqueradeCIDR: 172.20.0.0/16
-  podCIDR: 172.20.128.0/17
-  secretStore: memfs://clusters.example.com/minimal.example.com/secrets
-  serviceAccountIssuerDiscovery:
-    discoveryStore: memfs://discovery.example.com/minimal.example.com
-    enableAWSOIDCProvider: true
-  serviceClusterIPRange: 100.64.0.0/13
-  snapshotController:
-    enabled: true
-  sshAccess:
-  - 0.0.0.0/0
-  subnets:
-  - cidr: 172.20.32.0/19
-    name: us-test-1a
-    type: Public
-    zone: us-test-1a
-  topology:
-    dns:
-      type: Public
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_discovery.json_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_discovery.json_content
deleted file mode 100644
index aba05dfd1a0c4..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_discovery.json_content
+++ /dev/null
@@ -1,18 +0,0 @@
-{
-"issuer": "https://discovery.example.com/minimal.example.com",
-"jwks_uri": "https://discovery.example.com/minimal.example.com/openid/v1/jwks",
-"authorization_endpoint": "urn:kubernetes:programmatic_authorization",
-"response_types_supported": [
-"id_token"
-],
-"subject_types_supported": [
-"public"
-],
-"id_token_signing_alg_values_supported": [
-"RS256"
-],
-"claims_supported": [
-"sub",
-"iss"
-]
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_keys.json_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_keys.json_content
deleted file mode 100644
index ddcbc6ed75733..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_keys.json_content
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-"keys": [
-{
-"use": "sig",
-"kty": "RSA",
-"kid": "3mNcULfgtWECYyZWY5ow1rOHjiRwEZHx28HQcRec3Ew",
-"alg": "RS256",
-"n": "2JbeF8dNwqfEKKD65aGlVs58fWkA0qZdVLKw8qATzRBJTi1nqbj2kAR4gyy_C8Mxouxva_om9d7Sq8Ka55T7-w",
-"e": "AQAB"
-},
-{
-"use": "sig",
-"kty": "RSA",
-"kid": "G-cZ10iKJqrXhR15ivI7Lg2q_cuL0zN9ouL0vF67FLc",
-"alg": "RS256",
-"n": "o4Tridlsf4Yz3UAiup_scSTiG_OqxkUW3Fz7zGKvVcLeYj9GEIKuzoB1VFk1nboDq4cCuGLfdzaQdCQKPIsDuw",
-"e": "AQAB"
-}
-]
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
deleted file mode 100644
index 6d716ed9ac47f..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ /dev/null
@@ -1,136 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  creationTimestamp: null
-  labels:
-    k8s-app: etcd-manager-events
-  name: etcd-manager-events
-  namespace: kube-system
-spec:
-  containers:
-  - command:
-    - /bin/sh
-    - -c
-    - mkfifo /tmp/pipe; (tee -a /var/log/etcd.log < /tmp/pipe & ) ; exec /etcd-manager
-      --backup-store=memfs://clusters.example.com/minimal.example.com/backups/etcd/events
-      --client-urls=https://__name__:4002 --cluster-name=etcd-events --containerized=true
-      --dns-suffix=.internal.minimal.example.com --grpc-port=3997 --peer-urls=https://__name__:2381
-      --quarantine-client-urls=https://__name__:3995 --v=6 --volume-name-tag=k8s.io/etcd/events
-      --volume-provider=aws --volume-tag=k8s.io/etcd/events --volume-tag=k8s.io/role/control-plane=1
-      --volume-tag=kubernetes.io/cluster/minimal.example.com=owned > /tmp/pipe 2>&1
-    env:
-    - name: ETCD_MANAGER_DAILY_BACKUPS_RETENTION
-      value: 90d
-    image: registry.k8s.io/etcdadm/etcd-manager-slim:v3.0.20230925
-    name: etcd-manager
-    resources:
-      requests:
-        cpu: 200m
-        memory: 100Mi
-    securityContext:
-      privileged: true
-    volumeMounts:
-    - mountPath: /rootfs
-      name: rootfs
-    - mountPath: /run
-      name: run
-    - mountPath: /etc/kubernetes/pki/etcd-manager
-      name: pki
-    - mountPath: /opt
-      name: opt
-    - mountPath: /var/log/etcd.log
-      name: varlogetcd
-  hostNetwork: true
-  hostPID: true
-  initContainers:
-  - args:
-    - --target-dir=/opt/kops-utils/
-    - --src=/ko-app/kops-utils-cp
-    command:
-    - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
-    name: kops-utils-cp
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --target-dir=/opt/etcd-v3.4.13
-    - --src=/usr/local/bin/etcd
-    - --src=/usr/local/bin/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/etcd:3.4.13-0
-    name: init-etcd-3-4-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --target-dir=/opt/etcd-v3.5.13
-    - --src=/usr/local/bin/etcd
-    - --src=/usr/local/bin/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/etcd:3.5.13-0
-    name: init-etcd-3-5-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --symlink
-    - --target-dir=/opt/etcd-v3.4.3
-    - --src=/opt/etcd-v3.4.13/etcd
-    - --src=/opt/etcd-v3.4.13/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
-    name: init-etcd-symlinks-3-4-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --symlink
-    - --target-dir=/opt/etcd-v3.5.0
-    - --target-dir=/opt/etcd-v3.5.1
-    - --target-dir=/opt/etcd-v3.5.3
-    - --target-dir=/opt/etcd-v3.5.4
-    - --target-dir=/opt/etcd-v3.5.6
-    - --target-dir=/opt/etcd-v3.5.7
-    - --target-dir=/opt/etcd-v3.5.9
-    - --src=/opt/etcd-v3.5.13/etcd
-    - --src=/opt/etcd-v3.5.13/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
-    name: init-etcd-symlinks-3-5-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  priorityClassName: system-cluster-critical
-  tolerations:
-  - key: CriticalAddonsOnly
-    operator: Exists
-  volumes:
-  - hostPath:
-      path: /
-      type: Directory
-    name: rootfs
-  - hostPath:
-      path: /run
-      type: DirectoryOrCreate
-    name: run
-  - hostPath:
-      path: /etc/kubernetes/pki/etcd-manager-events
-      type: DirectoryOrCreate
-    name: pki
-  - emptyDir: {}
-    name: opt
-  - hostPath:
-      path: /var/log/etcd-events.log
-      type: FileOrCreate
-    name: varlogetcd
-status: {}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
deleted file mode 100644
index ce52df218a5a8..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ /dev/null
@@ -1,136 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  creationTimestamp: null
-  labels:
-    k8s-app: etcd-manager-main
-  name: etcd-manager-main
-  namespace: kube-system
-spec:
-  containers:
-  - command:
-    - /bin/sh
-    - -c
-    - mkfifo /tmp/pipe; (tee -a /var/log/etcd.log < /tmp/pipe & ) ; exec /etcd-manager
-      --backup-store=memfs://clusters.example.com/minimal.example.com/backups/etcd/main
-      --client-urls=https://__name__:4001 --cluster-name=etcd --containerized=true
-      --dns-suffix=.internal.minimal.example.com --grpc-port=3996 --peer-urls=https://__name__:2380
-      --quarantine-client-urls=https://__name__:3994 --v=6 --volume-name-tag=k8s.io/etcd/main
-      --volume-provider=aws --volume-tag=k8s.io/etcd/main --volume-tag=k8s.io/role/control-plane=1
-      --volume-tag=kubernetes.io/cluster/minimal.example.com=owned > /tmp/pipe 2>&1
-    env:
-    - name: ETCD_MANAGER_DAILY_BACKUPS_RETENTION
-      value: 90d
-    image: registry.k8s.io/etcdadm/etcd-manager-slim:v3.0.20230925
-    name: etcd-manager
-    resources:
-      requests:
-        cpu: 200m
-        memory: 100Mi
-    securityContext:
-      privileged: true
-    volumeMounts:
-    - mountPath: /rootfs
-      name: rootfs
-    - mountPath: /run
-      name: run
-    - mountPath: /etc/kubernetes/pki/etcd-manager
-      name: pki
-    - mountPath: /opt
-      name: opt
-    - mountPath: /var/log/etcd.log
-      name: varlogetcd
-  hostNetwork: true
-  hostPID: true
-  initContainers:
-  - args:
-    - --target-dir=/opt/kops-utils/
-    - --src=/ko-app/kops-utils-cp
-    command:
-    - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
-    name: kops-utils-cp
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --target-dir=/opt/etcd-v3.4.13
-    - --src=/usr/local/bin/etcd
-    - --src=/usr/local/bin/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/etcd:3.4.13-0
-    name: init-etcd-3-4-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --target-dir=/opt/etcd-v3.5.13
-    - --src=/usr/local/bin/etcd
-    - --src=/usr/local/bin/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/etcd:3.5.13-0
-    name: init-etcd-3-5-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --symlink
-    - --target-dir=/opt/etcd-v3.4.3
-    - --src=/opt/etcd-v3.4.13/etcd
-    - --src=/opt/etcd-v3.4.13/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
-    name: init-etcd-symlinks-3-4-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  - args:
-    - --symlink
-    - --target-dir=/opt/etcd-v3.5.0
-    - --target-dir=/opt/etcd-v3.5.1
-    - --target-dir=/opt/etcd-v3.5.3
-    - --target-dir=/opt/etcd-v3.5.4
-    - --target-dir=/opt/etcd-v3.5.6
-    - --target-dir=/opt/etcd-v3.5.7
-    - --target-dir=/opt/etcd-v3.5.9
-    - --src=/opt/etcd-v3.5.13/etcd
-    - --src=/opt/etcd-v3.5.13/etcdctl
-    command:
-    - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
-    name: init-etcd-symlinks-3-5-13
-    resources: {}
-    volumeMounts:
-    - mountPath: /opt
-      name: opt
-  priorityClassName: system-cluster-critical
-  tolerations:
-  - key: CriticalAddonsOnly
-    operator: Exists
-  volumes:
-  - hostPath:
-      path: /
-      type: Directory
-    name: rootfs
-  - hostPath:
-      path: /run
-      type: DirectoryOrCreate
-    name: run
-  - hostPath:
-      path: /etc/kubernetes/pki/etcd-manager-main
-      type: DirectoryOrCreate
-    name: pki
-  - emptyDir: {}
-    name: opt
-  - hostPath:
-      path: /var/log/etcd.log
-      type: FileOrCreate
-    name: varlogetcd
-status: {}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
deleted file mode 100644
index 362215b2355c0..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
+++ /dev/null
@@ -1,254 +0,0 @@
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-cloud-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: aws-cloud-controller.addons.k8s.io
-    k8s-app: aws-cloud-controller-manager
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-spec:
-  selector:
-    matchLabels:
-      k8s-app: aws-cloud-controller-manager
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        k8s-app: aws-cloud-controller-manager
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: node-role.kubernetes.io/control-plane
-                operator: Exists
-            - matchExpressions:
-              - key: node-role.kubernetes.io/master
-                operator: Exists
-      containers:
-      - args:
-        - --allocate-node-cidrs=true
-        - --cloud-provider=aws
-        - --cluster-cidr=172.20.128.0/17
-        - --cluster-name=minimal.example.com
-        - --configure-cloud-routes=false
-        - --enable-leader-migration=true
-        - --leader-elect=true
-        - --v=2
-        - --use-service-account-credentials=true
-        - --cloud-config=/etc/kubernetes/cloud.config
-        env:
-        - name: KUBERNETES_SERVICE_HOST
-          value: 127.0.0.1
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/aws-cloud-controller-manager.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
-        imagePullPolicy: IfNotPresent
-        name: aws-cloud-controller-manager
-        resources:
-          requests:
-            cpu: 200m
-        volumeMounts:
-        - mountPath: /etc/kubernetes/cloud.config
-          name: cloudconfig
-          readOnly: true
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      hostNetwork: true
-      priorityClassName: system-cluster-critical
-      securityContext:
-        fsGroup: 10001
-      serviceAccountName: aws-cloud-controller-manager
-      tolerations:
-      - effect: NoSchedule
-        key: node.cloudprovider.kubernetes.io/uninitialized
-        value: "true"
-      - effect: NoSchedule
-        key: node.kubernetes.io/not-ready
-      - effect: NoSchedule
-        key: node-role.kubernetes.io/control-plane
-      - effect: NoSchedule
-        key: node-role.kubernetes.io/master
-      volumes:
-      - hostPath:
-          path: /etc/kubernetes/cloud.config
-          type: ""
-        name: cloudconfig
-      - name: token-amazonaws-com
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              audience: amazonaws.com
-              expirationSeconds: 86400
-              path: token
-  updateStrategy:
-    type: RollingUpdate
-
----
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-cloud-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: aws-cloud-controller.addons.k8s.io
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-cloud-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: aws-cloud-controller.addons.k8s.io
-  name: cloud-controller-manager:apiserver-authentication-reader
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: extension-apiserver-authentication-reader
-subjects:
-- apiGroup: ""
-  kind: ServiceAccount
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-cloud-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: aws-cloud-controller.addons.k8s.io
-  name: system:cloud-controller-manager
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - '*'
-- apiGroups:
-  - ""
-  resources:
-  - nodes/status
-  verbs:
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - services
-  verbs:
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - services/status
-  verbs:
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - serviceaccounts
-  verbs:
-  - create
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumes
-  verbs:
-  - get
-  - list
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  verbs:
-  - create
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resourceNames:
-  - node-controller
-  - service-controller
-  - route-controller
-  resources:
-  - serviceaccounts/token
-  verbs:
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-cloud-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: aws-cloud-controller.addons.k8s.io
-  name: system:cloud-controller-manager
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:cloud-controller-manager
-subjects:
-- apiGroup: ""
-  kind: ServiceAccount
-  name: aws-cloud-controller-manager
-  namespace: kube-system
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content
deleted file mode 100644
index acda154543151..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content
+++ /dev/null
@@ -1,1169 +0,0 @@
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-controller
-  namespace: kube-system
-spec:
-  maxUnavailable: 1
-  selector:
-    matchLabels:
-      app: ebs-csi-controller
-      app.kubernetes.io/instance: aws-ebs-csi-driver
-      app.kubernetes.io/name: aws-ebs-csi-driver
-
----
-
-apiVersion: v1
-automountServiceAccountToken: true
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-controller-sa
-  namespace: kube-system
-
----
-
-apiVersion: v1
-automountServiceAccountToken: true
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-node-sa
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-external-attacher-role
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumes
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - csi.storage.k8s.io
-  resources:
-  - csinodeinfos
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - volumeattachments
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - volumeattachments/status
-  verbs:
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-node-role
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - patch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - volumeattachments
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-external-provisioner-role
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshots
-  verbs:
-  - get
-  - list
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotcontents
-  verbs:
-  - get
-  - list
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - csinodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - volumeattachments
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-external-resizer-role
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumes
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims/status
-  verbs:
-  - update
-  - patch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-external-snapshotter-role
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotcontents
-  verbs:
-  - create
-  - get
-  - list
-  - watch
-  - update
-  - delete
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotcontents/status
-  verbs:
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-attacher-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: ebs-external-attacher-role
-subjects:
-- kind: ServiceAccount
-  name: ebs-csi-controller-sa
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-node-getter-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: ebs-csi-node-role
-subjects:
-- kind: ServiceAccount
-  name: ebs-csi-node-sa
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-provisioner-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: ebs-external-provisioner-role
-subjects:
-- kind: ServiceAccount
-  name: ebs-csi-controller-sa
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-resizer-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: ebs-external-resizer-role
-subjects:
-- kind: ServiceAccount
-  name: ebs-csi-controller-sa
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-snapshotter-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: ebs-external-snapshotter-role
-subjects:
-- kind: ServiceAccount
-  name: ebs-csi-controller-sa
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-leases-role
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - get
-  - watch
-  - list
-  - delete
-  - update
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-leases-rolebinding
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: ebs-csi-leases-role
-subjects:
-- kind: ServiceAccount
-  name: ebs-csi-controller-sa
-  namespace: kube-system
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app: ebs-csi-controller
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-controller
-  namespace: kube-system
-spec:
-  ports:
-  - name: metrics
-    port: 3301
-    targetPort: 3301
-  selector:
-    app: ebs-csi-controller
-  type: ClusterIP
-
----
-
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-node
-  namespace: kube-system
-spec:
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      app: ebs-csi-node
-      app.kubernetes.io/instance: aws-ebs-csi-driver
-      app.kubernetes.io/name: aws-ebs-csi-driver
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app: ebs-csi-node
-        app.kubernetes.io/component: csi-driver
-        app.kubernetes.io/instance: aws-ebs-csi-driver
-        app.kubernetes.io/name: aws-ebs-csi-driver
-        app.kubernetes.io/version: v1.30.0
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: topology.kubernetes.io/zone
-                operator: Exists
-              - key: eks.amazonaws.com/compute-type
-                operator: NotIn
-                values:
-                - fargate
-              - key: node.kubernetes.io/instance-type
-                operator: NotIn
-                values:
-                - a1.medium
-                - a1.large
-                - a1.xlarge
-                - a1.2xlarge
-                - a1.4xlarge
-      containers:
-      - args:
-        - node
-        - --endpoint=$(CSI_ENDPOINT)
-        - --logging-format=text
-        - --v=2
-        env:
-        - name: AWS_REGION
-          value: us-test-1
-        - name: CSI_ENDPOINT
-          value: unix:/csi/csi.sock
-        - name: CSI_NODE_NAME
-          valueFrom:
-            fieldRef:
-              fieldPath: spec.nodeName
-        image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0
-        imagePullPolicy: IfNotPresent
-        lifecycle:
-          preStop:
-            exec:
-              command:
-              - /bin/aws-ebs-csi-driver
-              - pre-stop-hook
-        livenessProbe:
-          failureThreshold: 5
-          httpGet:
-            path: /healthz
-            port: healthz
-          initialDelaySeconds: 10
-          periodSeconds: 10
-          timeoutSeconds: 3
-        name: ebs-plugin
-        ports:
-        - containerPort: 9808
-          name: healthz
-          protocol: TCP
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          privileged: true
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /var/lib/kubelet
-          mountPropagation: Bidirectional
-          name: kubelet-dir
-        - mountPath: /csi
-          name: plugin-dir
-        - mountPath: /dev
-          name: device-dir
-      - args:
-        - --csi-address=$(ADDRESS)
-        - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-        - --v=2
-        env:
-        - name: ADDRESS
-          value: /csi/csi.sock
-        - name: DRIVER_REG_SOCK_PATH
-          value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock
-        image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          exec:
-            command:
-            - /csi-node-driver-registrar
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-            - --mode=kubelet-registration-probe
-          initialDelaySeconds: 30
-          periodSeconds: 90
-          timeoutSeconds: 15
-        name: node-driver-registrar
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /csi
-          name: plugin-dir
-        - mountPath: /registration
-          name: registration-dir
-        - mountPath: /var/lib/kubelet/plugins/ebs.csi.aws.com/
-          name: probe-dir
-      - args:
-        - --csi-address=/csi/csi.sock
-        image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5
-        imagePullPolicy: IfNotPresent
-        name: liveness-probe
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /csi
-          name: plugin-dir
-      hostNetwork: false
-      nodeSelector:
-        kubernetes.io/os: linux
-      priorityClassName: system-node-critical
-      securityContext:
-        fsGroup: 0
-        runAsGroup: 0
-        runAsNonRoot: false
-        runAsUser: 0
-      serviceAccountName: ebs-csi-node-sa
-      tolerations:
-      - operator: Exists
-      volumes:
-      - hostPath:
-          path: /var/lib/kubelet
-          type: Directory
-        name: kubelet-dir
-      - hostPath:
-          path: /var/lib/kubelet/plugins/ebs.csi.aws.com/
-          type: DirectoryOrCreate
-        name: plugin-dir
-      - hostPath:
-          path: /var/lib/kubelet/plugins_registry/
-          type: Directory
-        name: registration-dir
-      - hostPath:
-          path: /dev
-          type: Directory
-        name: device-dir
-      - emptyDir: {}
-        name: probe-dir
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: 10%
-    type: RollingUpdate
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs-csi-controller
-  namespace: kube-system
-spec:
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      app: ebs-csi-controller
-      app.kubernetes.io/instance: aws-ebs-csi-driver
-      app.kubernetes.io/name: aws-ebs-csi-driver
-  strategy:
-    rollingUpdate:
-      maxUnavailable: 1
-    type: RollingUpdate
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app: ebs-csi-controller
-        app.kubernetes.io/component: csi-driver
-        app.kubernetes.io/instance: aws-ebs-csi-driver
-        app.kubernetes.io/name: aws-ebs-csi-driver
-        app.kubernetes.io/version: v1.30.0
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - preference:
-              matchExpressions:
-              - key: eks.amazonaws.com/compute-type
-                operator: NotIn
-                values:
-                - fargate
-            weight: 1
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: kubernetes.io/os
-                operator: In
-                values:
-                - linux
-            - matchExpressions:
-              - key: kubernetes.io/os
-                operator: In
-                values:
-                - linux
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                - key: app
-                  operator: In
-                  values:
-                  - ebs-csi-controller
-              topologyKey: kubernetes.io/hostname
-            weight: 100
-      containers:
-      - args:
-        - controller
-        - --endpoint=$(CSI_ENDPOINT)
-        - --k8s-tag-cluster-id=minimal.example.com
-        - --extra-tags=KubernetesCluster=minimal.example.com
-        - --http-endpoint=0.0.0.0:3301
-        - --batching=true
-        - --logging-format=text
-        - --v=5
-        env:
-        - name: AWS_REGION
-          value: us-test-1
-        - name: CSI_ENDPOINT
-          value: unix:///var/lib/csi/sockets/pluginproxy/csi.sock
-        - name: CSI_NODE_NAME
-          valueFrom:
-            fieldRef:
-              apiVersion: v1
-              fieldPath: spec.nodeName
-        - name: AWS_ACCESS_KEY_ID
-          valueFrom:
-            secretKeyRef:
-              key: key_id
-              name: aws-secret
-              optional: true
-        - name: AWS_SECRET_ACCESS_KEY
-          valueFrom:
-            secretKeyRef:
-              key: access_key
-              name: aws-secret
-              optional: true
-        - name: AWS_EC2_ENDPOINT
-          valueFrom:
-            configMapKeyRef:
-              key: endpoint
-              name: aws-meta
-              optional: true
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          failureThreshold: 5
-          httpGet:
-            path: /healthz
-            port: healthz
-          initialDelaySeconds: 10
-          periodSeconds: 10
-          timeoutSeconds: 3
-        name: ebs-plugin
-        ports:
-        - containerPort: 9808
-          name: healthz
-          protocol: TCP
-        - containerPort: 3301
-          name: metrics
-          protocol: TCP
-        readinessProbe:
-          failureThreshold: 5
-          httpGet:
-            path: /healthz
-            port: healthz
-          initialDelaySeconds: 10
-          periodSeconds: 10
-          timeoutSeconds: 3
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /var/lib/csi/sockets/pluginproxy/
-          name: socket-dir
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      - args:
-        - --timeout=60s
-        - --csi-address=$(ADDRESS)
-        - --v=5
-        - --feature-gates=Topology=true
-        - --extra-create-metadata
-        - --leader-election=true
-        - --default-fstype=ext4
-        - --kube-api-qps=20
-        - --kube-api-burst=100
-        - --worker-threads=100
-        env:
-        - name: ADDRESS
-          value: /var/lib/csi/sockets/pluginproxy/csi.sock
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5
-        imagePullPolicy: IfNotPresent
-        name: csi-provisioner
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /var/lib/csi/sockets/pluginproxy/
-          name: socket-dir
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      - args:
-        - --timeout=60s
-        - --csi-address=$(ADDRESS)
-        - --v=5
-        - --leader-election=true
-        - --kube-api-qps=20
-        - --kube-api-burst=100
-        - --worker-threads=100
-        env:
-        - name: ADDRESS
-          value: /var/lib/csi/sockets/pluginproxy/csi.sock
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5
-        imagePullPolicy: IfNotPresent
-        name: csi-attacher
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /var/lib/csi/sockets/pluginproxy/
-          name: socket-dir
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      - args:
-        - --csi-address=$(ADDRESS)
-        - --leader-election=true
-        - --extra-create-metadata
-        - --kube-api-qps=20
-        - --kube-api-burst=100
-        - --worker-threads=100
-        env:
-        - name: ADDRESS
-          value: /var/lib/csi/sockets/pluginproxy/csi.sock
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v7.0.0-eks-1-29-5
-        imagePullPolicy: IfNotPresent
-        name: csi-snapshotter
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /var/lib/csi/sockets/pluginproxy/
-          name: socket-dir
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      - args:
-        - --timeout=60s
-        - --csi-address=$(ADDRESS)
-        - --v=5
-        - --leader-election=true
-        env:
-        - name: ADDRESS
-          value: /var/lib/csi/sockets/pluginproxy/csi.sock
-        - name: POD_NAME
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.name
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1
-        imagePullPolicy: IfNotPresent
-        name: volumemodifier
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /var/lib/csi/sockets/pluginproxy/
-          name: socket-dir
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      - args:
-        - --timeout=60s
-        - --csi-address=$(ADDRESS)
-        - --v=5
-        - --handle-volume-inuse-error=false
-        - --leader-election=true
-        - --kube-api-qps=20
-        - --kube-api-burst=100
-        - --workers=100
-        env:
-        - name: ADDRESS
-          value: /var/lib/csi/sockets/pluginproxy/csi.sock
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5
-        imagePullPolicy: IfNotPresent
-        name: csi-resizer
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /var/lib/csi/sockets/pluginproxy/
-          name: socket-dir
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      - args:
-        - --csi-address=/csi/csi.sock
-        env:
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5
-        imagePullPolicy: IfNotPresent
-        name: liveness-probe
-        resources:
-          limits:
-            memory: 256Mi
-          requests:
-            cpu: 10m
-            memory: 40Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /csi
-          name: socket-dir
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      nodeSelector:
-        kubernetes.io/os: linux
-      priorityClassName: system-cluster-critical
-      securityContext:
-        fsGroup: 1000
-        runAsGroup: 1000
-        runAsNonRoot: true
-        runAsUser: 1000
-      serviceAccountName: ebs-csi-controller-sa
-      tolerations:
-      - key: CriticalAddonsOnly
-        operator: Exists
-      - effect: NoExecute
-        operator: Exists
-        tolerationSeconds: 300
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            app: ebs-csi-controller
-            app.kubernetes.io/instance: aws-ebs-csi-driver
-            app.kubernetes.io/name: aws-ebs-csi-driver
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            app: ebs-csi-controller
-            app.kubernetes.io/instance: aws-ebs-csi-driver
-            app.kubernetes.io/name: aws-ebs-csi-driver
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-      volumes:
-      - emptyDir: {}
-        name: socket-dir
-      - name: token-amazonaws-com
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              audience: amazonaws.com
-              expirationSeconds: 86400
-              path: token
-
----
-
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-ebs-csi-driver.addons.k8s.io
-    app.kubernetes.io/component: csi-driver
-    app.kubernetes.io/instance: aws-ebs-csi-driver
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-ebs-csi-driver
-    app.kubernetes.io/version: v1.30.0
-    k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-  name: ebs.csi.aws.com
-spec:
-  attachRequired: true
-  podInfoOnMount: false
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-load-balancer-controller.addons.k8s.io-k8s-1.19_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-load-balancer-controller.addons.k8s.io-k8s-1.19_content
deleted file mode 100644
index dea787ab0df13..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-aws-load-balancer-controller.addons.k8s.io-k8s-1.19_content
+++ /dev/null
@@ -1,1264 +0,0 @@
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.11.1
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: ingressclassparams.elbv2.k8s.aws
-spec:
-  group: elbv2.k8s.aws
-  names:
-    kind: IngressClassParams
-    listKind: IngressClassParamsList
-    plural: ingressclassparams
-    singular: ingressclassparams
-  scope: Cluster
-  versions:
-  - additionalPrinterColumns:
-    - description: The Ingress Group name
-      jsonPath: .spec.group.name
-      name: GROUP-NAME
-      type: string
-    - description: The AWS Load Balancer scheme
-      jsonPath: .spec.scheme
-      name: SCHEME
-      type: string
-    - description: The AWS Load Balancer ipAddressType
-      jsonPath: .spec.ipAddressType
-      name: IP-ADDRESS-TYPE
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: AGE
-      type: date
-    name: v1beta1
-    schema:
-      openAPIV3Schema:
-        description: IngressClassParams is the Schema for the IngressClassParams API
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: IngressClassParamsSpec defines the desired state of IngressClassParams
-            properties:
-              group:
-                description: Group defines the IngressGroup for all Ingresses that
-                  belong to IngressClass with this IngressClassParams.
-                properties:
-                  name:
-                    description: Name is the name of IngressGroup.
-                    type: string
-                required:
-                - name
-                type: object
-              inboundCIDRs:
-                description: InboundCIDRs specifies the CIDRs that are allowed to
-                  access the Ingresses that belong to IngressClass with this IngressClassParams.
-                items:
-                  type: string
-                type: array
-              ipAddressType:
-                description: IPAddressType defines the ip address type for all Ingresses
-                  that belong to IngressClass with this IngressClassParams.
-                enum:
-                - ipv4
-                - dualstack
-                type: string
-              loadBalancerAttributes:
-                description: LoadBalancerAttributes define the custom attributes to
-                  LoadBalancers for all Ingress that that belong to IngressClass with
-                  this IngressClassParams.
-                items:
-                  description: Attributes defines custom attributes on resources.
-                  properties:
-                    key:
-                      description: The key of the attribute.
-                      type: string
-                    value:
-                      description: The value of the attribute.
-                      type: string
-                  required:
-                  - key
-                  - value
-                  type: object
-                type: array
-              namespaceSelector:
-                description: NamespaceSelector restrict the namespaces of Ingresses
-                  that are allowed to specify the IngressClass with this IngressClassParams.
-                  * if absent or present but empty, it selects all namespaces.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              scheme:
-                description: Scheme defines the scheme for all Ingresses that belong
-                  to IngressClass with this IngressClassParams.
-                enum:
-                - internal
-                - internet-facing
-                type: string
-              sslPolicy:
-                description: SSLPolicy specifies the SSL Policy for all Ingresses
-                  that belong to IngressClass with this IngressClassParams.
-                type: string
-              subnets:
-                description: Subnets defines the subnets for all Ingresses that belong
-                  to IngressClass with this IngressClassParams.
-                properties:
-                  ids:
-                    description: IDs specify the resource IDs of subnets. Exactly
-                      one of this or `tags` must be specified.
-                    items:
-                      description: SubnetID specifies a subnet ID.
-                      pattern: subnet-[0-9a-f]+
-                      type: string
-                    minItems: 1
-                    type: array
-                  tags:
-                    additionalProperties:
-                      items:
-                        type: string
-                      type: array
-                    description: Tags specifies subnets in the load balancer's VPC
-                      where each tag specified in the map key contains one of the
-                      values in the corresponding value list. Exactly one of this
-                      or `ids` must be specified.
-                    type: object
-                type: object
-              tags:
-                description: Tags defines list of Tags on AWS resources provisioned
-                  for Ingresses that belong to IngressClass with this IngressClassParams.
-                items:
-                  description: Tag defines a AWS Tag on resources.
-                  properties:
-                    key:
-                      description: The key of the tag.
-                      type: string
-                    value:
-                      description: The value of the tag.
-                      type: string
-                  required:
-                  - key
-                  - value
-                  type: object
-                type: array
-            type: object
-        type: object
-    served: true
-    storage: true
-    subresources: {}
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.11.1
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: targetgroupbindings.elbv2.k8s.aws
-spec:
-  group: elbv2.k8s.aws
-  names:
-    kind: TargetGroupBinding
-    listKind: TargetGroupBindingList
-    plural: targetgroupbindings
-    singular: targetgroupbinding
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - description: The Kubernetes Service's name
-      jsonPath: .spec.serviceRef.name
-      name: SERVICE-NAME
-      type: string
-    - description: The Kubernetes Service's port
-      jsonPath: .spec.serviceRef.port
-      name: SERVICE-PORT
-      type: string
-    - description: The AWS TargetGroup's TargetType
-      jsonPath: .spec.targetType
-      name: TARGET-TYPE
-      type: string
-    - description: The AWS TargetGroup's Amazon Resource Name
-      jsonPath: .spec.targetGroupARN
-      name: ARN
-      priority: 1
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: AGE
-      type: date
-    name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: TargetGroupBinding is the Schema for the TargetGroupBinding API
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding
-            properties:
-              networking:
-                description: networking provides the networking setup for ELBV2 LoadBalancer
-                  to access targets in TargetGroup.
-                properties:
-                  ingress:
-                    description: List of ingress rules to allow ELBV2 LoadBalancer
-                      to access targets in TargetGroup.
-                    items:
-                      properties:
-                        from:
-                          description: List of peers which should be able to access
-                            the targets in TargetGroup. At least one NetworkingPeer
-                            should be specified.
-                          items:
-                            description: NetworkingPeer defines the source/destination
-                              peer for networking rules.
-                            properties:
-                              ipBlock:
-                                description: IPBlock defines an IPBlock peer. If specified,
-                                  none of the other fields can be set.
-                                properties:
-                                  cidr:
-                                    description: CIDR is the network CIDR. Both IPV4
-                                      or IPV6 CIDR are accepted.
-                                    type: string
-                                required:
-                                - cidr
-                                type: object
-                              securityGroup:
-                                description: SecurityGroup defines a SecurityGroup
-                                  peer. If specified, none of the other fields can
-                                  be set.
-                                properties:
-                                  groupID:
-                                    description: GroupID is the EC2 SecurityGroupID.
-                                    type: string
-                                required:
-                                - groupID
-                                type: object
-                            type: object
-                          type: array
-                        ports:
-                          description: List of ports which should be made accessible
-                            on the targets in TargetGroup. If ports is empty or unspecified,
-                            it defaults to all ports with TCP.
-                          items:
-                            properties:
-                              port:
-                                anyOf:
-                                - type: integer
-                                - type: string
-                                description: The port which traffic must match. When
-                                  NodePort endpoints(instance TargetType) is used,
-                                  this must be a numerical port. When Port endpoints(ip
-                                  TargetType) is used, this can be either numerical
-                                  or named port on pods. if port is unspecified, it
-                                  defaults to all ports.
-                                x-kubernetes-int-or-string: true
-                              protocol:
-                                description: The protocol which traffic must match.
-                                  If protocol is unspecified, it defaults to TCP.
-                                enum:
-                                - TCP
-                                - UDP
-                                type: string
-                            type: object
-                          type: array
-                      required:
-                      - from
-                      - ports
-                      type: object
-                    type: array
-                type: object
-              serviceRef:
-                description: serviceRef is a reference to a Kubernetes Service and
-                  ServicePort.
-                properties:
-                  name:
-                    description: Name is the name of the Service.
-                    type: string
-                  port:
-                    anyOf:
-                    - type: integer
-                    - type: string
-                    description: Port is the port of the ServicePort.
-                    x-kubernetes-int-or-string: true
-                required:
-                - name
-                - port
-                type: object
-              targetGroupARN:
-                description: targetGroupARN is the Amazon Resource Name (ARN) for
-                  the TargetGroup.
-                type: string
-              targetType:
-                description: targetType is the TargetType of TargetGroup. If unspecified,
-                  it will be automatically inferred.
-                enum:
-                - instance
-                - ip
-                type: string
-            required:
-            - serviceRef
-            - targetGroupARN
-            type: object
-          status:
-            description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding
-            properties:
-              observedGeneration:
-                description: The generation observed by the TargetGroupBinding controller.
-                format: int64
-                type: integer
-            type: object
-        type: object
-    served: true
-    storage: false
-    subresources:
-      status: {}
-  - additionalPrinterColumns:
-    - description: The Kubernetes Service's name
-      jsonPath: .spec.serviceRef.name
-      name: SERVICE-NAME
-      type: string
-    - description: The Kubernetes Service's port
-      jsonPath: .spec.serviceRef.port
-      name: SERVICE-PORT
-      type: string
-    - description: The AWS TargetGroup's TargetType
-      jsonPath: .spec.targetType
-      name: TARGET-TYPE
-      type: string
-    - description: The AWS TargetGroup's Amazon Resource Name
-      jsonPath: .spec.targetGroupARN
-      name: ARN
-      priority: 1
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: AGE
-      type: date
-    name: v1beta1
-    schema:
-      openAPIV3Schema:
-        description: TargetGroupBinding is the Schema for the TargetGroupBinding API
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding
-            properties:
-              ipAddressType:
-                description: ipAddressType specifies whether the target group is of
-                  type IPv4 or IPv6. If unspecified, it will be automatically inferred.
-                enum:
-                - ipv4
-                - ipv6
-                type: string
-              networking:
-                description: networking defines the networking rules to allow ELBV2
-                  LoadBalancer to access targets in TargetGroup.
-                properties:
-                  ingress:
-                    description: List of ingress rules to allow ELBV2 LoadBalancer
-                      to access targets in TargetGroup.
-                    items:
-                      description: NetworkingIngressRule defines a particular set
-                        of traffic that is allowed to access TargetGroup's targets.
-                      properties:
-                        from:
-                          description: List of peers which should be able to access
-                            the targets in TargetGroup. At least one NetworkingPeer
-                            should be specified.
-                          items:
-                            description: NetworkingPeer defines the source/destination
-                              peer for networking rules.
-                            properties:
-                              ipBlock:
-                                description: IPBlock defines an IPBlock peer. If specified,
-                                  none of the other fields can be set.
-                                properties:
-                                  cidr:
-                                    description: CIDR is the network CIDR. Both IPV4
-                                      or IPV6 CIDR are accepted.
-                                    type: string
-                                required:
-                                - cidr
-                                type: object
-                              securityGroup:
-                                description: SecurityGroup defines a SecurityGroup
-                                  peer. If specified, none of the other fields can
-                                  be set.
-                                properties:
-                                  groupID:
-                                    description: GroupID is the EC2 SecurityGroupID.
-                                    type: string
-                                required:
-                                - groupID
-                                type: object
-                            type: object
-                          type: array
-                        ports:
-                          description: List of ports which should be made accessible
-                            on the targets in TargetGroup. If ports is empty or unspecified,
-                            it defaults to all ports with TCP.
-                          items:
-                            description: NetworkingPort defines the port and protocol
-                              for networking rules.
-                            properties:
-                              port:
-                                anyOf:
-                                - type: integer
-                                - type: string
-                                description: The port which traffic must match. When
-                                  NodePort endpoints(instance TargetType) is used,
-                                  this must be a numerical port. When Port endpoints(ip
-                                  TargetType) is used, this can be either numerical
-                                  or named port on pods. if port is unspecified, it
-                                  defaults to all ports.
-                                x-kubernetes-int-or-string: true
-                              protocol:
-                                description: The protocol which traffic must match.
-                                  If protocol is unspecified, it defaults to TCP.
-                                enum:
-                                - TCP
-                                - UDP
-                                type: string
-                            type: object
-                          type: array
-                      required:
-                      - from
-                      - ports
-                      type: object
-                    type: array
-                type: object
-              nodeSelector:
-                description: node selector for instance type target groups to only
-                  register certain nodes
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              serviceRef:
-                description: serviceRef is a reference to a Kubernetes Service and
-                  ServicePort.
-                properties:
-                  name:
-                    description: Name is the name of the Service.
-                    type: string
-                  port:
-                    anyOf:
-                    - type: integer
-                    - type: string
-                    description: Port is the port of the ServicePort.
-                    x-kubernetes-int-or-string: true
-                required:
-                - name
-                - port
-                type: object
-              targetGroupARN:
-                description: targetGroupARN is the Amazon Resource Name (ARN) for
-                  the TargetGroup.
-                minLength: 1
-                type: string
-              targetType:
-                description: targetType is the TargetType of TargetGroup. If unspecified,
-                  it will be automatically inferred.
-                enum:
-                - instance
-                - ip
-                type: string
-            required:
-            - serviceRef
-            - targetGroupARN
-            type: object
-          status:
-            description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding
-            properties:
-              observedGeneration:
-                description: The generation observed by the TargetGroupBinding controller.
-                format: int64
-                type: integer
-            type: object
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-controller
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-controller-leader-election-role
-  namespace: kube-system
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  verbs:
-  - create
-- apiGroups:
-  - ""
-  resourceNames:
-  - aws-load-balancer-controller-leader
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - update
-  - patch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - aws-load-balancer-controller-leader
-  resources:
-  - leases
-  verbs:
-  - get
-  - update
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-controller-role
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - namespaces
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - pods/status
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - services
-  verbs:
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - services/status
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - discovery.k8s.io
-  resources:
-  - endpointslices
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - elbv2.k8s.aws
-  resources:
-  - ingressclassparams
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - elbv2.k8s.aws
-  resources:
-  - targetgroupbindings
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - elbv2.k8s.aws
-  resources:
-  - targetgroupbindings/status
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - extensions
-  resources:
-  - ingresses
-  verbs:
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - extensions
-  resources:
-  - ingresses/status
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingressclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses
-  verbs:
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses/status
-  verbs:
-  - patch
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-controller-leader-election-rolebinding
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: aws-load-balancer-controller-leader-election-role
-subjects:
-- kind: ServiceAccount
-  name: aws-load-balancer-controller
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-controller-rolebinding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: aws-load-balancer-controller-role
-subjects:
-- kind: ServiceAccount
-  name: aws-load-balancer-controller
-  namespace: kube-system
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-webhook-service
-  namespace: kube-system
-spec:
-  ports:
-  - port: 443
-    targetPort: 9443
-  selector:
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/name: aws-load-balancer-controller
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-controller
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: controller
-      app.kubernetes.io/name: aws-load-balancer-controller
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app.kubernetes.io/component: controller
-        app.kubernetes.io/name: aws-load-balancer-controller
-        kops.k8s.io/managed-by: kops
-    spec:
-      containers:
-      - args:
-        - --metrics-bind-addr=:9442
-        - --cluster-name=minimal.example.com
-        - --enable-waf=false
-        - --enable-wafv2=false
-        - --enable-shield=false
-        - --ingress-class=alb
-        - --default-tags=KubernetesCluster=minimal.example.com
-        - --aws-region=us-test-1
-        env:
-        - name: NODENAME
-          valueFrom:
-            fieldRef:
-              apiVersion: v1
-              fieldPath: spec.nodeName
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/aws-load-balancer-controller.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/eks/aws-load-balancer-controller:v2.7.2
-        livenessProbe:
-          failureThreshold: 2
-          httpGet:
-            path: /healthz
-            port: 61779
-            scheme: HTTP
-          initialDelaySeconds: 30
-          timeoutSeconds: 10
-        name: controller
-        ports:
-        - containerPort: 9443
-          name: webhook-server
-          protocol: TCP
-        resources:
-          limits:
-            cpu: 200m
-            memory: 500Mi
-          requests:
-            cpu: 100m
-            memory: 200Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          runAsNonRoot: true
-        volumeMounts:
-        - mountPath: /tmp/k8s-webhook-server/serving-certs
-          name: cert
-          readOnly: true
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      priorityClassName: system-cluster-critical
-      securityContext:
-        fsGroup: 1337
-      serviceAccountName: aws-load-balancer-controller
-      terminationGracePeriodSeconds: 10
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            app.kubernetes.io/component: controller
-            app.kubernetes.io/name: aws-load-balancer-controller
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            app.kubernetes.io/component: controller
-            app.kubernetes.io/name: aws-load-balancer-controller
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-      volumes:
-      - name: cert
-        secret:
-          defaultMode: 420
-          secretName: aws-load-balancer-webhook-tls
-      - name: token-amazonaws-com
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              audience: amazonaws.com
-              expirationSeconds: 86400
-              path: token
-
----
-
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-serving-cert
-  namespace: kube-system
-spec:
-  dnsNames:
-  - aws-load-balancer-webhook-service.kube-system.svc
-  - aws-load-balancer-webhook-service.kube-system.svc.cluster.local
-  issuerRef:
-    kind: Issuer
-    name: aws-load-balancer-selfsigned-issuer
-  secretName: aws-load-balancer-webhook-tls
-
----
-
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-selfsigned-issuer
-  namespace: kube-system
-spec:
-  selfSigned: {}
-
----
-
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
-  annotations:
-    cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-webhook
-webhooks:
-- admissionReviewVersions:
-  - v1beta1
-  clientConfig:
-    service:
-      name: aws-load-balancer-webhook-service
-      namespace: kube-system
-      path: /mutate-v1-service
-  failurePolicy: Fail
-  name: mservice.elbv2.k8s.aws
-  objectSelector:
-    matchExpressions:
-    - key: app.kubernetes.io/name
-      operator: NotIn
-      values:
-      - aws-load-balancer-controller
-      - cert-manager
-  rules:
-  - apiGroups:
-    - ""
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    resources:
-    - services
-  sideEffects: None
-- admissionReviewVersions:
-  - v1beta1
-  clientConfig:
-    service:
-      name: aws-load-balancer-webhook-service
-      namespace: kube-system
-      path: /mutate-v1-pod
-  failurePolicy: Fail
-  name: mpod.elbv2.k8s.aws
-  namespaceSelector:
-    matchExpressions:
-    - key: elbv2.k8s.aws/pod-readiness-gate-inject
-      operator: In
-      values:
-      - enabled
-  objectSelector:
-    matchExpressions:
-    - key: app.kubernetes.io/name
-      operator: NotIn
-      values:
-      - aws-load-balancer-controller
-      - cert-manager
-  rules:
-  - apiGroups:
-    - ""
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    resources:
-    - pods
-  sideEffects: None
-- admissionReviewVersions:
-  - v1beta1
-  clientConfig:
-    service:
-      name: aws-load-balancer-webhook-service
-      namespace: kube-system
-      path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding
-  failurePolicy: Fail
-  name: mtargetgroupbinding.elbv2.k8s.aws
-  rules:
-  - apiGroups:
-    - elbv2.k8s.aws
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - targetgroupbindings
-  sideEffects: None
-
----
-
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  annotations:
-    cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-webhook
-webhooks:
-- admissionReviewVersions:
-  - v1beta1
-  clientConfig:
-    service:
-      name: aws-load-balancer-webhook-service
-      namespace: kube-system
-      path: /validate-elbv2-k8s-aws-v1beta1-ingressclassparams
-  failurePolicy: Fail
-  name: vingressclassparams.elbv2.k8s.aws
-  objectSelector:
-    matchExpressions:
-    - key: app.kubernetes.io/name
-      operator: NotIn
-      values:
-      - aws-load-balancer-controller
-  rules:
-  - apiGroups:
-    - elbv2.k8s.aws
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - ingressclassparams
-  sideEffects: None
-- admissionReviewVersions:
-  - v1beta1
-  clientConfig:
-    service:
-      name: aws-load-balancer-webhook-service
-      namespace: kube-system
-      path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding
-  failurePolicy: Fail
-  name: vtargetgroupbinding.elbv2.k8s.aws
-  rules:
-  - apiGroups:
-    - elbv2.k8s.aws
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - targetgroupbindings
-  sideEffects: None
-- admissionReviewVersions:
-  - v1beta1
-  clientConfig:
-    service:
-      name: aws-load-balancer-webhook-service
-      namespace: kube-system
-      path: /validate-networking-v1-ingress
-  failurePolicy: Fail
-  matchPolicy: Equivalent
-  name: vingress.elbv2.k8s.aws
-  rules:
-  - apiGroups:
-    - networking.k8s.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - ingresses
-  sideEffects: None
-
----
-
-apiVersion: elbv2.k8s.aws/v1beta1
-kind: IngressClassParams
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: alb
-
----
-
-apiVersion: networking.k8s.io/v1
-kind: IngressClass
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: alb
-spec:
-  controller: ingress.k8s.aws/alb
-  parameters:
-    apiGroup: elbv2.k8s.aws
-    kind: IngressClassParams
-    name: alb
-
----
-
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: aws-load-balancer-controller.addons.k8s.io
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-load-balancer-controller
-    k8s-addon: aws-load-balancer-controller.addons.k8s.io
-  name: aws-load-balancer-controller
-  namespace: kube-system
-spec:
-  maxUnavailable: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: controller
-      app.kubernetes.io/name: aws-load-balancer-controller
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
deleted file mode 100644
index 8edc44989159b..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ /dev/null
@@ -1,215 +0,0 @@
-kind: Addons
-metadata:
-  creationTimestamp: null
-  name: bootstrap
-spec:
-  addons:
-  - id: k8s-1.16
-    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
-    name: kops-controller.addons.k8s.io
-    needsRollingUpdate: control-plane
-    selector:
-      k8s-addon: kops-controller.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.12
-    manifest: coredns.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: ba735657b67049b2042dfd3c49f84a23f31d70b07f9a8828c8a575fc8621ee6f
-    name: coredns.addons.k8s.io
-    selector:
-      k8s-addon: coredns.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.9
-    manifest: kubelet-api.rbac.addons.k8s.io/k8s-1.9.yaml
-    manifestHash: 01c120e887bd98d82ef57983ad58a0b22bc85efb48108092a24c4b82e4c9ea81
-    name: kubelet-api.rbac.addons.k8s.io
-    selector:
-      k8s-addon: kubelet-api.rbac.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.23
-    manifest: leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml
-    manifestHash: b9c91e09c0f28c9b74ff140b8395d611834c627d698846d625c10975a74a48c4
-    name: leader-migration.rbac.addons.k8s.io
-    selector:
-      k8s-addon: leader-migration.rbac.addons.k8s.io
-    version: 9.99.0
-  - manifest: limit-range.addons.k8s.io/v1.5.0.yaml
-    manifestHash: 2d55c3bc5e354e84a3730a65b42f39aba630a59dc8d32b30859fcce3d3178bc2
-    name: limit-range.addons.k8s.io
-    selector:
-      k8s-addon: limit-range.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.12
-    manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
-    name: dns-controller.addons.k8s.io
-    selector:
-      k8s-addon: dns-controller.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.15
-    manifest: cluster-autoscaler.addons.k8s.io/k8s-1.15.yaml
-    manifestHash: 2f22656a23f35197a0289f66dee8ea2fa95570290c493097ef838faf5afdc0d0
-    name: cluster-autoscaler.addons.k8s.io
-    selector:
-      k8s-addon: cluster-autoscaler.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.11
-    manifest: metrics-server.addons.k8s.io/k8s-1.11.yaml
-    manifestHash: 5a79936723087694804b3f2dd19917119822494bb92c2ea8f8554729bb293e9f
-    name: metrics-server.addons.k8s.io
-    needsPKI: true
-    selector:
-      k8s-app: metrics-server
-    version: 9.99.0
-  - id: k8s-1.16
-    manifest: certmanager.io/k8s-1.16.yaml
-    manifestHash: dd98c17b9b3aabaf2e061353104d4ec52bec8f023cfecddb3911efbcad3ef566
-    name: certmanager.io
-    prune:
-      kinds:
-      - kind: ConfigMap
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - kind: Service
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - kind: ServiceAccount
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - group: admissionregistration.k8s.io
-        kind: MutatingWebhookConfiguration
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-      - group: admissionregistration.k8s.io
-        kind: ValidatingWebhookConfiguration
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-      - group: apps
-        kind: DaemonSet
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-      - group: apps
-        kind: Deployment
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - group: apps
-        kind: StatefulSet
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-      - group: policy
-        kind: PodDisruptionBudget
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-      - group: rbac.authorization.k8s.io
-        kind: ClusterRole
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-      - group: rbac.authorization.k8s.io
-        kind: ClusterRoleBinding
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-      - group: rbac.authorization.k8s.io
-        kind: Role
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - group: rbac.authorization.k8s.io
-        kind: RoleBinding
-        labelSelector: addon.kops.k8s.io/name=certmanager.io,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-    selector: null
-    version: 9.99.0
-  - id: k8s-1.11
-    manifest: node-termination-handler.aws/k8s-1.11.yaml
-    manifestHash: d866a5436fc9a285cbaefb8ffc8d5582a3239e563dda381f23f62482851fd489
-    name: node-termination-handler.aws
-    prune:
-      kinds:
-      - kind: ConfigMap
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - kind: Service
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - kind: ServiceAccount
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - group: admissionregistration.k8s.io
-        kind: MutatingWebhookConfiguration
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - group: admissionregistration.k8s.io
-        kind: ValidatingWebhookConfiguration
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - group: apps
-        kind: DaemonSet
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - group: apps
-        kind: Deployment
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - group: apps
-        kind: StatefulSet
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - group: policy
-        kind: PodDisruptionBudget
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-        namespaces:
-        - kube-system
-      - group: rbac.authorization.k8s.io
-        kind: ClusterRole
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - group: rbac.authorization.k8s.io
-        kind: ClusterRoleBinding
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - group: rbac.authorization.k8s.io
-        kind: Role
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-      - group: rbac.authorization.k8s.io
-        kind: RoleBinding
-        labelSelector: addon.kops.k8s.io/name=node-termination-handler.aws,app.kubernetes.io/managed-by=kops
-    selector:
-      k8s-addon: node-termination-handler.aws
-    version: 9.99.0
-  - id: k8s-1.19
-    manifest: aws-load-balancer-controller.addons.k8s.io/k8s-1.19.yaml
-    manifestHash: f32c0c5f258e9fb26f8a69b7a2e9ece3738d737552e774d8d84896dcab323782
-    name: aws-load-balancer-controller.addons.k8s.io
-    needsPKI: true
-    selector:
-      k8s-addon: aws-load-balancer-controller.addons.k8s.io
-    version: 9.99.0
-  - id: v1.15.0
-    manifest: storage-aws.addons.k8s.io/v1.15.0.yaml
-    manifestHash: 4e2cda50cd5048133aad1b5e28becb60f4629d3f9e09c514a2757c27998b4200
-    name: storage-aws.addons.k8s.io
-    selector:
-      k8s-addon: storage-aws.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.16
-    manifest: networking.amazon-vpc-routed-eni/k8s-1.16.yaml
-    manifestHash: 516820e30ab3bc0817c018c36ffd1841d5e6c53b553a0ddd8ae98d7d3779c0fc
-    name: networking.amazon-vpc-routed-eni
-    needsRollingUpdate: all
-    selector:
-      role.kubernetes.io/networking: "1"
-    version: 9.99.0
-  - id: k8s-1.18
-    manifest: aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml
-    manifestHash: f3223b9a44579686035fdb15c957144739d373733434abfaafa7b2ddb4d40174
-    name: aws-cloud-controller.addons.k8s.io
-    selector:
-      k8s-addon: aws-cloud-controller.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.17
-    manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml
-    manifestHash: bb18101b2a8e6b143360e2d1d9a2def0c150988efa7ed46377dd9dc6907a2586
-    name: aws-ebs-csi-driver.addons.k8s.io
-    selector:
-      k8s-addon: aws-ebs-csi-driver.addons.k8s.io
-    version: 9.99.0
-  - id: k8s-1.20
-    manifest: snapshot-controller.addons.k8s.io/k8s-1.20.yaml
-    manifestHash: 06a1cffd153dc7f8cf75853da3683d3a68b55411883d84b9bebf049fc746b980
-    name: snapshot-controller.addons.k8s.io
-    needsPKI: true
-    selector:
-      k8s-addon: snapshot-controller.addons.k8s.io
-    version: 9.99.0
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content
deleted file mode 100644
index 193293dbb014c..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content
+++ /dev/null
@@ -1,10095 +0,0 @@
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: certificaterequests.cert-manager.io
-spec:
-  group: cert-manager.io
-  names:
-    categories:
-    - cert-manager
-    kind: CertificateRequest
-    listKind: CertificateRequestList
-    plural: certificaterequests
-    shortNames:
-    - cr
-    - crs
-    singular: certificaterequest
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .status.conditions[?(@.type=="Approved")].status
-      name: Approved
-      type: string
-    - jsonPath: .status.conditions[?(@.type=="Denied")].status
-      name: Denied
-      type: string
-    - jsonPath: .status.conditions[?(@.type=="Ready")].status
-      name: Ready
-      type: string
-    - jsonPath: .spec.issuerRef.name
-      name: Issuer
-      type: string
-    - jsonPath: .spec.username
-      name: Requestor
-      type: string
-    - jsonPath: .status.conditions[?(@.type=="Ready")].message
-      name: Status
-      priority: 1
-      type: string
-    - description: CreationTimestamp is a timestamp representing the server time when
-        this object was created. It is not guaranteed to be set in happens-before
-        order across separate operations. Clients may not set this value. It is represented
-        in RFC3339 form and is in UTC.
-      jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: "A CertificateRequest is used to request a signed certificate
-          from one of the configured issuers. \n All fields within the CertificateRequest's
-          `spec` are immutable after creation. A CertificateRequest will either succeed
-          or fail, as denoted by its `status.state` field. \n A CertificateRequest
-          is a one-shot resource, meaning it represents a single point in time request
-          for a certificate and cannot be re-used."
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Desired state of the CertificateRequest resource.
-            properties:
-              duration:
-                description: The requested 'duration' (i.e. lifetime) of the Certificate.
-                  This option may be ignored/overridden by some issuer types.
-                type: string
-              extra:
-                additionalProperties:
-                  items:
-                    type: string
-                  type: array
-                description: Extra contains extra attributes of the user that created
-                  the CertificateRequest. Populated by the cert-manager webhook on
-                  creation and immutable.
-                type: object
-              groups:
-                description: Groups contains group membership of the user that created
-                  the CertificateRequest. Populated by the cert-manager webhook on
-                  creation and immutable.
-                items:
-                  type: string
-                type: array
-                x-kubernetes-list-type: atomic
-              isCA:
-                description: IsCA will request to mark the certificate as valid for
-                  certificate signing when submitting to the issuer. This will automatically
-                  add the `cert sign` usage to the list of `usages`.
-                type: boolean
-              issuerRef:
-                description: IssuerRef is a reference to the issuer for this CertificateRequest.  If
-                  the `kind` field is not set, or set to `Issuer`, an Issuer resource
-                  with the given name in the same namespace as the CertificateRequest
-                  will be used.  If the `kind` field is set to `ClusterIssuer`, a
-                  ClusterIssuer with the provided name will be used. The `name` field
-                  in this stanza is required at all times. The group field refers
-                  to the API group of the issuer which defaults to `cert-manager.io`
-                  if empty.
-                properties:
-                  group:
-                    description: Group of the resource being referred to.
-                    type: string
-                  kind:
-                    description: Kind of the resource being referred to.
-                    type: string
-                  name:
-                    description: Name of the resource being referred to.
-                    type: string
-                required:
-                - name
-                type: object
-              request:
-                description: The PEM-encoded x509 certificate signing request to be
-                  submitted to the CA for signing.
-                format: byte
-                type: string
-              uid:
-                description: UID contains the uid of the user that created the CertificateRequest.
-                  Populated by the cert-manager webhook on creation and immutable.
-                type: string
-              usages:
-                description: Usages is the set of x509 usages that are requested for
-                  the certificate. If usages are set they SHOULD be encoded inside
-                  the CSR spec Defaults to `digital signature` and `key encipherment`
-                  if not specified.
-                items:
-                  description: "KeyUsage specifies valid usage contexts for keys.
-                    See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3 https://tools.ietf.org/html/rfc5280#section-4.2.1.12
-                    \n Valid KeyUsage values are as follows: \"signing\", \"digital
-                    signature\", \"content commitment\", \"key encipherment\", \"key
-                    agreement\", \"data encipherment\", \"cert sign\", \"crl sign\",
-                    \"encipher only\", \"decipher only\", \"any\", \"server auth\",
-                    \"client auth\", \"code signing\", \"email protection\", \"s/mime\",
-                    \"ipsec end system\", \"ipsec tunnel\", \"ipsec user\", \"timestamping\",
-                    \"ocsp signing\", \"microsoft sgc\", \"netscape sgc\""
-                  enum:
-                  - signing
-                  - digital signature
-                  - content commitment
-                  - key encipherment
-                  - key agreement
-                  - data encipherment
-                  - cert sign
-                  - crl sign
-                  - encipher only
-                  - decipher only
-                  - any
-                  - server auth
-                  - client auth
-                  - code signing
-                  - email protection
-                  - s/mime
-                  - ipsec end system
-                  - ipsec tunnel
-                  - ipsec user
-                  - timestamping
-                  - ocsp signing
-                  - microsoft sgc
-                  - netscape sgc
-                  type: string
-                type: array
-              username:
-                description: Username contains the name of the user that created the
-                  CertificateRequest. Populated by the cert-manager webhook on creation
-                  and immutable.
-                type: string
-            required:
-            - issuerRef
-            - request
-            type: object
-          status:
-            description: Status of the CertificateRequest. This is set and managed
-              automatically.
-            properties:
-              ca:
-                description: The PEM encoded x509 certificate of the signer, also
-                  known as the CA (Certificate Authority). This is set on a best-effort
-                  basis by different issuers. If not set, the CA is assumed to be
-                  unknown/not available.
-                format: byte
-                type: string
-              certificate:
-                description: The PEM encoded x509 certificate resulting from the certificate
-                  signing request. If not set, the CertificateRequest has either not
-                  been completed or has failed. More information on failure can be
-                  found by checking the `conditions` field.
-                format: byte
-                type: string
-              conditions:
-                description: List of status conditions to indicate the status of a
-                  CertificateRequest. Known condition types are `Ready` and `InvalidRequest`.
-                items:
-                  description: CertificateRequestCondition contains condition information
-                    for a CertificateRequest.
-                  properties:
-                    lastTransitionTime:
-                      description: LastTransitionTime is the timestamp corresponding
-                        to the last status change of this condition.
-                      format: date-time
-                      type: string
-                    message:
-                      description: Message is a human readable description of the
-                        details of the last transition, complementing reason.
-                      type: string
-                    reason:
-                      description: Reason is a brief machine readable explanation
-                        for the condition's last transition.
-                      type: string
-                    status:
-                      description: Status of the condition, one of (`True`, `False`,
-                        `Unknown`).
-                      enum:
-                      - "True"
-                      - "False"
-                      - Unknown
-                      type: string
-                    type:
-                      description: Type of the condition, known values are (`Ready`,
-                        `InvalidRequest`, `Approved`, `Denied`).
-                      type: string
-                  required:
-                  - status
-                  - type
-                  type: object
-                type: array
-                x-kubernetes-list-map-keys:
-                - type
-                x-kubernetes-list-type: map
-              failureTime:
-                description: FailureTime stores the time that this CertificateRequest
-                  failed. This is used to influence garbage collection and back-off.
-                format: date-time
-                type: string
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: certificates.cert-manager.io
-spec:
-  group: cert-manager.io
-  names:
-    categories:
-    - cert-manager
-    kind: Certificate
-    listKind: CertificateList
-    plural: certificates
-    shortNames:
-    - cert
-    - certs
-    singular: certificate
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .status.conditions[?(@.type=="Ready")].status
-      name: Ready
-      type: string
-    - jsonPath: .spec.secretName
-      name: Secret
-      type: string
-    - jsonPath: .spec.issuerRef.name
-      name: Issuer
-      priority: 1
-      type: string
-    - jsonPath: .status.conditions[?(@.type=="Ready")].message
-      name: Status
-      priority: 1
-      type: string
-    - description: CreationTimestamp is a timestamp representing the server time when
-        this object was created. It is not guaranteed to be set in happens-before
-        order across separate operations. Clients may not set this value. It is represented
-        in RFC3339 form and is in UTC.
-      jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: "A Certificate resource should be created to ensure an up to
-          date and signed x509 certificate is stored in the Kubernetes Secret resource
-          named in `spec.secretName`. \n The stored certificate will be renewed before
-          it expires (as configured by `spec.renewBefore`)."
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Desired state of the Certificate resource.
-            properties:
-              additionalOutputFormats:
-                description: AdditionalOutputFormats defines extra output formats
-                  of the private key and signed certificate chain to be written to
-                  this Certificate's target Secret. This is an Alpha Feature and is
-                  only enabled with the `--feature-gates=AdditionalCertificateOutputFormats=true`
-                  option on both the controller and webhook components.
-                items:
-                  description: CertificateAdditionalOutputFormat defines an additional
-                    output format of a Certificate resource. These contain supplementary
-                    data formats of the signed certificate chain and paired private
-                    key.
-                  properties:
-                    type:
-                      description: Type is the name of the format type that should
-                        be written to the Certificate's target Secret.
-                      enum:
-                      - DER
-                      - CombinedPEM
-                      type: string
-                  required:
-                  - type
-                  type: object
-                type: array
-              commonName:
-                description: 'CommonName is a common name to be used on the Certificate.
-                  The CommonName should have a length of 64 characters or fewer to
-                  avoid generating invalid CSRs. This value is ignored by TLS clients
-                  when any subject alt name is set. This is x509 behaviour: https://tools.ietf.org/html/rfc6125#section-6.4.4'
-                type: string
-              dnsNames:
-                description: DNSNames is a list of DNS subjectAltNames to be set on
-                  the Certificate.
-                items:
-                  type: string
-                type: array
-              duration:
-                description: The requested 'duration' (i.e. lifetime) of the Certificate.
-                  This option may be ignored/overridden by some issuer types. If unset
-                  this defaults to 90 days. Certificate will be renewed either 2/3
-                  through its duration or `renewBefore` period before its expiry,
-                  whichever is later. Minimum accepted duration is 1 hour. Value must
-                  be in units accepted by Go time.ParseDuration https://golang.org/pkg/time/#ParseDuration
-                type: string
-              emailAddresses:
-                description: EmailAddresses is a list of email subjectAltNames to
-                  be set on the Certificate.
-                items:
-                  type: string
-                type: array
-              encodeUsagesInRequest:
-                description: EncodeUsagesInRequest controls whether key usages should
-                  be present in the CertificateRequest
-                type: boolean
-              ipAddresses:
-                description: IPAddresses is a list of IP address subjectAltNames to
-                  be set on the Certificate.
-                items:
-                  type: string
-                type: array
-              isCA:
-                description: IsCA will mark this Certificate as valid for certificate
-                  signing. This will automatically add the `cert sign` usage to the
-                  list of `usages`.
-                type: boolean
-              issuerRef:
-                description: IssuerRef is a reference to the issuer for this certificate.
-                  If the `kind` field is not set, or set to `Issuer`, an Issuer resource
-                  with the given name in the same namespace as the Certificate will
-                  be used. If the `kind` field is set to `ClusterIssuer`, a ClusterIssuer
-                  with the provided name will be used. The `name` field in this stanza
-                  is required at all times.
-                properties:
-                  group:
-                    description: Group of the resource being referred to.
-                    type: string
-                  kind:
-                    description: Kind of the resource being referred to.
-                    type: string
-                  name:
-                    description: Name of the resource being referred to.
-                    type: string
-                required:
-                - name
-                type: object
-              keystores:
-                description: Keystores configures additional keystore output formats
-                  stored in the `secretName` Secret resource.
-                properties:
-                  jks:
-                    description: JKS configures options for storing a JKS keystore
-                      in the `spec.secretName` Secret resource.
-                    properties:
-                      create:
-                        description: Create enables JKS keystore creation for the
-                          Certificate. If true, a file named `keystore.jks` will be
-                          created in the target Secret resource, encrypted using the
-                          password stored in `passwordSecretRef`. The keystore file
-                          will be updated immediately. If the issuer provided a CA
-                          certificate, a file named `truststore.jks` will also be
-                          created in the target Secret resource, encrypted using the
-                          password stored in `passwordSecretRef` containing the issuing
-                          Certificate Authority
-                        type: boolean
-                      passwordSecretRef:
-                        description: PasswordSecretRef is a reference to a key in
-                          a Secret resource containing the password used to encrypt
-                          the JKS keystore.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                    required:
-                    - create
-                    - passwordSecretRef
-                    type: object
-                  pkcs12:
-                    description: PKCS12 configures options for storing a PKCS12 keystore
-                      in the `spec.secretName` Secret resource.
-                    properties:
-                      create:
-                        description: Create enables PKCS12 keystore creation for the
-                          Certificate. If true, a file named `keystore.p12` will be
-                          created in the target Secret resource, encrypted using the
-                          password stored in `passwordSecretRef`. The keystore file
-                          will be updated immediately. If the issuer provided a CA
-                          certificate, a file named `truststore.p12` will also be
-                          created in the target Secret resource, encrypted using the
-                          password stored in `passwordSecretRef` containing the issuing
-                          Certificate Authority
-                        type: boolean
-                      passwordSecretRef:
-                        description: PasswordSecretRef is a reference to a key in
-                          a Secret resource containing the password used to encrypt
-                          the PKCS12 keystore.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                    required:
-                    - create
-                    - passwordSecretRef
-                    type: object
-                type: object
-              literalSubject:
-                description: LiteralSubject is an LDAP formatted string that represents
-                  the [X.509 Subject field](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.6).
-                  Use this *instead* of the Subject field if you need to ensure the
-                  correct ordering of the RDN sequence, such as when issuing certs
-                  for LDAP authentication. See https://github.com/cert-manager/cert-manager/issues/3203,
-                  https://github.com/cert-manager/cert-manager/issues/4424. This field
-                  is alpha level and is only supported by cert-manager installations
-                  where LiteralCertificateSubject feature gate is enabled on both
-                  cert-manager controller and webhook.
-                type: string
-              privateKey:
-                description: Options to control private keys used for the Certificate.
-                properties:
-                  algorithm:
-                    description: Algorithm is the private key algorithm of the corresponding
-                      private key for this certificate. If provided, allowed values
-                      are either `RSA`,`Ed25519` or `ECDSA` If `algorithm` is specified
-                      and `size` is not provided, key size of 256 will be used for
-                      `ECDSA` key algorithm and key size of 2048 will be used for
-                      `RSA` key algorithm. key size is ignored when using the `Ed25519`
-                      key algorithm.
-                    enum:
-                    - RSA
-                    - ECDSA
-                    - Ed25519
-                    type: string
-                  encoding:
-                    description: The private key cryptography standards (PKCS) encoding
-                      for this certificate's private key to be encoded in. If provided,
-                      allowed values are `PKCS1` and `PKCS8` standing for PKCS#1 and
-                      PKCS#8, respectively. Defaults to `PKCS1` if not specified.
-                    enum:
-                    - PKCS1
-                    - PKCS8
-                    type: string
-                  rotationPolicy:
-                    description: RotationPolicy controls how private keys should be
-                      regenerated when a re-issuance is being processed. If set to
-                      Never, a private key will only be generated if one does not
-                      already exist in the target `spec.secretName`. If one does exists
-                      but it does not have the correct algorithm or size, a warning
-                      will be raised to await user intervention. If set to Always,
-                      a private key matching the specified requirements will be generated
-                      whenever a re-issuance occurs. Default is 'Never' for backward
-                      compatibility.
-                    enum:
-                    - Never
-                    - Always
-                    type: string
-                  size:
-                    description: Size is the key bit size of the corresponding private
-                      key for this certificate. If `algorithm` is set to `RSA`, valid
-                      values are `2048`, `4096` or `8192`, and will default to `2048`
-                      if not specified. If `algorithm` is set to `ECDSA`, valid values
-                      are `256`, `384` or `521`, and will default to `256` if not
-                      specified. If `algorithm` is set to `Ed25519`, Size is ignored.
-                      No other values are allowed.
-                    type: integer
-                type: object
-              renewBefore:
-                description: How long before the currently issued certificate's expiry
-                  cert-manager should renew the certificate. The default is 2/3 of
-                  the issued certificate's duration. Minimum accepted value is 5 minutes.
-                  Value must be in units accepted by Go time.ParseDuration https://golang.org/pkg/time/#ParseDuration
-                type: string
-              revisionHistoryLimit:
-                description: revisionHistoryLimit is the maximum number of CertificateRequest
-                  revisions that are maintained in the Certificate's history. Each
-                  revision represents a single `CertificateRequest` created by this
-                  Certificate, either when it was created, renewed, or Spec was changed.
-                  Revisions will be removed by oldest first if the number of revisions
-                  exceeds this number. If set, revisionHistoryLimit must be a value
-                  of `1` or greater. If unset (`nil`), revisions will not be garbage
-                  collected. Default value is `nil`.
-                format: int32
-                type: integer
-              secretName:
-                description: SecretName is the name of the secret resource that will
-                  be automatically created and managed by this Certificate resource.
-                  It will be populated with a private key and certificate, signed
-                  by the denoted issuer.
-                type: string
-              secretTemplate:
-                description: SecretTemplate defines annotations and labels to be copied
-                  to the Certificate's Secret. Labels and annotations on the Secret
-                  will be changed as they appear on the SecretTemplate when added
-                  or removed. SecretTemplate annotations are added in conjunction
-                  with, and cannot overwrite, the base set of annotations cert-manager
-                  sets on the Certificate's Secret.
-                properties:
-                  annotations:
-                    additionalProperties:
-                      type: string
-                    description: Annotations is a key value map to be copied to the
-                      target Kubernetes Secret.
-                    type: object
-                  labels:
-                    additionalProperties:
-                      type: string
-                    description: Labels is a key value map to be copied to the target
-                      Kubernetes Secret.
-                    type: object
-                type: object
-              subject:
-                description: Full X509 name specification (https://golang.org/pkg/crypto/x509/pkix/#Name).
-                properties:
-                  countries:
-                    description: Countries to be used on the Certificate.
-                    items:
-                      type: string
-                    type: array
-                  localities:
-                    description: Cities to be used on the Certificate.
-                    items:
-                      type: string
-                    type: array
-                  organizationalUnits:
-                    description: Organizational Units to be used on the Certificate.
-                    items:
-                      type: string
-                    type: array
-                  organizations:
-                    description: Organizations to be used on the Certificate.
-                    items:
-                      type: string
-                    type: array
-                  postalCodes:
-                    description: Postal codes to be used on the Certificate.
-                    items:
-                      type: string
-                    type: array
-                  provinces:
-                    description: State/Provinces to be used on the Certificate.
-                    items:
-                      type: string
-                    type: array
-                  serialNumber:
-                    description: Serial number to be used on the Certificate.
-                    type: string
-                  streetAddresses:
-                    description: Street addresses to be used on the Certificate.
-                    items:
-                      type: string
-                    type: array
-                type: object
-              uris:
-                description: URIs is a list of URI subjectAltNames to be set on the
-                  Certificate.
-                items:
-                  type: string
-                type: array
-              usages:
-                description: Usages is the set of x509 usages that are requested for
-                  the certificate. Defaults to `digital signature` and `key encipherment`
-                  if not specified.
-                items:
-                  description: "KeyUsage specifies valid usage contexts for keys.
-                    See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3 https://tools.ietf.org/html/rfc5280#section-4.2.1.12
-                    \n Valid KeyUsage values are as follows: \"signing\", \"digital
-                    signature\", \"content commitment\", \"key encipherment\", \"key
-                    agreement\", \"data encipherment\", \"cert sign\", \"crl sign\",
-                    \"encipher only\", \"decipher only\", \"any\", \"server auth\",
-                    \"client auth\", \"code signing\", \"email protection\", \"s/mime\",
-                    \"ipsec end system\", \"ipsec tunnel\", \"ipsec user\", \"timestamping\",
-                    \"ocsp signing\", \"microsoft sgc\", \"netscape sgc\""
-                  enum:
-                  - signing
-                  - digital signature
-                  - content commitment
-                  - key encipherment
-                  - key agreement
-                  - data encipherment
-                  - cert sign
-                  - crl sign
-                  - encipher only
-                  - decipher only
-                  - any
-                  - server auth
-                  - client auth
-                  - code signing
-                  - email protection
-                  - s/mime
-                  - ipsec end system
-                  - ipsec tunnel
-                  - ipsec user
-                  - timestamping
-                  - ocsp signing
-                  - microsoft sgc
-                  - netscape sgc
-                  type: string
-                type: array
-            required:
-            - issuerRef
-            - secretName
-            type: object
-          status:
-            description: Status of the Certificate. This is set and managed automatically.
-            properties:
-              conditions:
-                description: List of status conditions to indicate the status of certificates.
-                  Known condition types are `Ready` and `Issuing`.
-                items:
-                  description: CertificateCondition contains condition information
-                    for an Certificate.
-                  properties:
-                    lastTransitionTime:
-                      description: LastTransitionTime is the timestamp corresponding
-                        to the last status change of this condition.
-                      format: date-time
-                      type: string
-                    message:
-                      description: Message is a human readable description of the
-                        details of the last transition, complementing reason.
-                      type: string
-                    observedGeneration:
-                      description: If set, this represents the .metadata.generation
-                        that the condition was set based upon. For instance, if .metadata.generation
-                        is currently 12, but the .status.condition[x].observedGeneration
-                        is 9, the condition is out of date with respect to the current
-                        state of the Certificate.
-                      format: int64
-                      type: integer
-                    reason:
-                      description: Reason is a brief machine readable explanation
-                        for the condition's last transition.
-                      type: string
-                    status:
-                      description: Status of the condition, one of (`True`, `False`,
-                        `Unknown`).
-                      enum:
-                      - "True"
-                      - "False"
-                      - Unknown
-                      type: string
-                    type:
-                      description: Type of the condition, known values are (`Ready`,
-                        `Issuing`).
-                      type: string
-                  required:
-                  - status
-                  - type
-                  type: object
-                type: array
-                x-kubernetes-list-map-keys:
-                - type
-                x-kubernetes-list-type: map
-              failedIssuanceAttempts:
-                description: The number of continuous failed issuance attempts up
-                  till now. This field gets removed (if set) on a successful issuance
-                  and gets set to 1 if unset and an issuance has failed. If an issuance
-                  has failed, the delay till the next issuance will be calculated
-                  using formula time.Hour * 2 ^ (failedIssuanceAttempts - 1).
-                type: integer
-              lastFailureTime:
-                description: LastFailureTime is set only if the lastest issuance for
-                  this Certificate failed and contains the time of the failure. If
-                  an issuance has failed, the delay till the next issuance will be
-                  calculated using formula time.Hour * 2 ^ (failedIssuanceAttempts
-                  - 1). If the latest issuance has succeeded this field will be unset.
-                format: date-time
-                type: string
-              nextPrivateKeySecretName:
-                description: The name of the Secret resource containing the private
-                  key to be used for the next certificate iteration. The keymanager
-                  controller will automatically set this field if the `Issuing` condition
-                  is set to `True`. It will automatically unset this field when the
-                  Issuing condition is not set or False.
-                type: string
-              notAfter:
-                description: The expiration time of the certificate stored in the
-                  secret named by this resource in `spec.secretName`.
-                format: date-time
-                type: string
-              notBefore:
-                description: The time after which the certificate stored in the secret
-                  named by this resource in spec.secretName is valid.
-                format: date-time
-                type: string
-              renewalTime:
-                description: RenewalTime is the time at which the certificate will
-                  be next renewed. If not set, no upcoming renewal is scheduled.
-                format: date-time
-                type: string
-              revision:
-                description: "The current 'revision' of the certificate as issued.
-                  \n When a CertificateRequest resource is created, it will have the
-                  `cert-manager.io/certificate-revision` set to one greater than the
-                  current value of this field. \n Upon issuance, this field will be
-                  set to the value of the annotation on the CertificateRequest resource
-                  used to issue the certificate. \n Persisting the value on the CertificateRequest
-                  resource allows the certificates controller to know whether a request
-                  is part of an old issuance or if it is part of the ongoing revision's
-                  issuance by checking if the revision value in the annotation is
-                  greater than this field."
-                type: integer
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: challenges.acme.cert-manager.io
-spec:
-  group: acme.cert-manager.io
-  names:
-    categories:
-    - cert-manager
-    - cert-manager-acme
-    kind: Challenge
-    listKind: ChallengeList
-    plural: challenges
-    singular: challenge
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .status.state
-      name: State
-      type: string
-    - jsonPath: .spec.dnsName
-      name: Domain
-      type: string
-    - jsonPath: .status.reason
-      name: Reason
-      priority: 1
-      type: string
-    - description: CreationTimestamp is a timestamp representing the server time when
-        this object was created. It is not guaranteed to be set in happens-before
-        order across separate operations. Clients may not set this value. It is represented
-        in RFC3339 form and is in UTC.
-      jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: Challenge is a type to represent a Challenge request with an
-          ACME server
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            properties:
-              authorizationURL:
-                description: The URL to the ACME Authorization resource that this
-                  challenge is a part of.
-                type: string
-              dnsName:
-                description: dnsName is the identifier that this challenge is for,
-                  e.g. example.com. If the requested DNSName is a 'wildcard', this
-                  field MUST be set to the non-wildcard domain, e.g. for `*.example.com`,
-                  it must be `example.com`.
-                type: string
-              issuerRef:
-                description: References a properly configured ACME-type Issuer which
-                  should be used to create this Challenge. If the Issuer does not
-                  exist, processing will be retried. If the Issuer is not an 'ACME'
-                  Issuer, an error will be returned and the Challenge will be marked
-                  as failed.
-                properties:
-                  group:
-                    description: Group of the resource being referred to.
-                    type: string
-                  kind:
-                    description: Kind of the resource being referred to.
-                    type: string
-                  name:
-                    description: Name of the resource being referred to.
-                    type: string
-                required:
-                - name
-                type: object
-              key:
-                description: 'The ACME challenge key for this challenge For HTTP01
-                  challenges, this is the value that must be responded with to complete
-                  the HTTP01 challenge in the format: `<private key JWK thumbprint>.<key
-                  from acme server for challenge>`. For DNS01 challenges, this is
-                  the base64 encoded SHA256 sum of the `<private key JWK thumbprint>.<key
-                  from acme server for challenge>` text that must be set as the TXT
-                  record content.'
-                type: string
-              solver:
-                description: Contains the domain solving configuration that should
-                  be used to solve this challenge resource.
-                properties:
-                  dns01:
-                    description: Configures cert-manager to attempt to complete authorizations
-                      by performing the DNS01 challenge flow.
-                    properties:
-                      acmeDNS:
-                        description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
-                          API to manage DNS01 challenge records.
-                        properties:
-                          accountSecretRef:
-                            description: A reference to a specific 'key' within a
-                              Secret resource. In some instances, `key` is a required
-                              field.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          host:
-                            type: string
-                        required:
-                        - accountSecretRef
-                        - host
-                        type: object
-                      akamai:
-                        description: Use the Akamai DNS zone management API to manage
-                          DNS01 challenge records.
-                        properties:
-                          accessTokenSecretRef:
-                            description: A reference to a specific 'key' within a
-                              Secret resource. In some instances, `key` is a required
-                              field.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          clientSecretSecretRef:
-                            description: A reference to a specific 'key' within a
-                              Secret resource. In some instances, `key` is a required
-                              field.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          clientTokenSecretRef:
-                            description: A reference to a specific 'key' within a
-                              Secret resource. In some instances, `key` is a required
-                              field.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          serviceConsumerDomain:
-                            type: string
-                        required:
-                        - accessTokenSecretRef
-                        - clientSecretSecretRef
-                        - clientTokenSecretRef
-                        - serviceConsumerDomain
-                        type: object
-                      azureDNS:
-                        description: Use the Microsoft Azure DNS API to manage DNS01
-                          challenge records.
-                        properties:
-                          clientID:
-                            description: if both this and ClientSecret are left unset
-                              MSI will be used
-                            type: string
-                          clientSecretSecretRef:
-                            description: if both this and ClientID are left unset
-                              MSI will be used
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          environment:
-                            description: name of the Azure environment (default AzurePublicCloud)
-                            enum:
-                            - AzurePublicCloud
-                            - AzureChinaCloud
-                            - AzureGermanCloud
-                            - AzureUSGovernmentCloud
-                            type: string
-                          hostedZoneName:
-                            description: name of the DNS zone that should be used
-                            type: string
-                          managedIdentity:
-                            description: managed identity configuration, can not be
-                              used at the same time as clientID, clientSecretSecretRef
-                              or tenantID
-                            properties:
-                              clientID:
-                                description: client ID of the managed identity, can
-                                  not be used at the same time as resourceID
-                                type: string
-                              resourceID:
-                                description: resource ID of the managed identity,
-                                  can not be used at the same time as clientID
-                                type: string
-                            type: object
-                          resourceGroupName:
-                            description: resource group the DNS zone is located in
-                            type: string
-                          subscriptionID:
-                            description: ID of the Azure subscription
-                            type: string
-                          tenantID:
-                            description: when specifying ClientID and ClientSecret
-                              then this field is also needed
-                            type: string
-                        required:
-                        - resourceGroupName
-                        - subscriptionID
-                        type: object
-                      cloudDNS:
-                        description: Use the Google Cloud DNS API to manage DNS01
-                          challenge records.
-                        properties:
-                          hostedZoneName:
-                            description: HostedZoneName is an optional field that
-                              tells cert-manager in which Cloud DNS zone the challenge
-                              record has to be created. If left empty cert-manager
-                              will automatically choose a zone.
-                            type: string
-                          project:
-                            type: string
-                          serviceAccountSecretRef:
-                            description: A reference to a specific 'key' within a
-                              Secret resource. In some instances, `key` is a required
-                              field.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - project
-                        type: object
-                      cloudflare:
-                        description: Use the Cloudflare API to manage DNS01 challenge
-                          records.
-                        properties:
-                          apiKeySecretRef:
-                            description: 'API key to use to authenticate with Cloudflare.
-                              Note: using an API token to authenticate is now the
-                              recommended method as it allows greater control of permissions.'
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          apiTokenSecretRef:
-                            description: API token used to authenticate with Cloudflare.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          email:
-                            description: Email of the account, only required when
-                              using API key based authentication.
-                            type: string
-                        type: object
-                      cnameStrategy:
-                        description: CNAMEStrategy configures how the DNS01 provider
-                          should handle CNAME records when found in DNS zones.
-                        enum:
-                        - None
-                        - Follow
-                        type: string
-                      digitalocean:
-                        description: Use the DigitalOcean DNS API to manage DNS01
-                          challenge records.
-                        properties:
-                          tokenSecretRef:
-                            description: A reference to a specific 'key' within a
-                              Secret resource. In some instances, `key` is a required
-                              field.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - tokenSecretRef
-                        type: object
-                      rfc2136:
-                        description: Use RFC2136 ("Dynamic Updates in the Domain Name
-                          System") (https://datatracker.ietf.org/doc/rfc2136/) to
-                          manage DNS01 challenge records.
-                        properties:
-                          nameserver:
-                            description: The IP address or hostname of an authoritative
-                              DNS server supporting RFC2136 in the form host:port.
-                              If the host is an IPv6 address it must be enclosed in
-                              square brackets (e.g [2001:db8::1]) ; port is optional.
-                              This field is required.
-                            type: string
-                          tsigAlgorithm:
-                            description: 'The TSIG Algorithm configured in the DNS
-                              supporting RFC2136. Used only when ``tsigSecretSecretRef``
-                              and ``tsigKeyName`` are defined. Supported values are
-                              (case-insensitive): ``HMACMD5`` (default), ``HMACSHA1``,
-                              ``HMACSHA256`` or ``HMACSHA512``.'
-                            type: string
-                          tsigKeyName:
-                            description: The TSIG Key name configured in the DNS.
-                              If ``tsigSecretSecretRef`` is defined, this field is
-                              required.
-                            type: string
-                          tsigSecretSecretRef:
-                            description: The name of the secret containing the TSIG
-                              value. If ``tsigKeyName`` is defined, this field is
-                              required.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - nameserver
-                        type: object
-                      route53:
-                        description: Use the AWS Route53 API to manage DNS01 challenge
-                          records.
-                        properties:
-                          accessKeyID:
-                            description: 'The AccessKeyID is used for authentication.
-                              Cannot be set when SecretAccessKeyID is set. If neither
-                              the Access Key nor Key ID are set, we fall-back to using
-                              env vars, shared credentials file or AWS Instance metadata,
-                              see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                            type: string
-                          accessKeyIDSecretRef:
-                            description: 'The SecretAccessKey is used for authentication.
-                              If set, pull the AWS access key ID from a key within
-                              a Kubernetes Secret. Cannot be set when AccessKeyID
-                              is set. If neither the Access Key nor Key ID are set,
-                              we fall-back to using env vars, shared credentials file
-                              or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          hostedZoneID:
-                            description: If set, the provider will manage only this
-                              zone in Route53 and will not do an lookup using the
-                              route53:ListHostedZonesByName api call.
-                            type: string
-                          region:
-                            description: Always set the region when using AccessKeyID
-                              and SecretAccessKey
-                            type: string
-                          role:
-                            description: Role is a Role ARN which the Route53 provider
-                              will assume using either the explicit credentials AccessKeyID/SecretAccessKey
-                              or the inferred credentials from environment variables,
-                              shared credentials file or AWS Instance metadata
-                            type: string
-                          secretAccessKeySecretRef:
-                            description: 'The SecretAccessKey is used for authentication.
-                              If neither the Access Key nor Key ID are set, we fall-back
-                              to using env vars, shared credentials file or AWS Instance
-                              metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - region
-                        type: object
-                      webhook:
-                        description: Configure an external webhook based DNS01 challenge
-                          solver to manage DNS01 challenge records.
-                        properties:
-                          config:
-                            description: Additional configuration that should be passed
-                              to the webhook apiserver when challenges are processed.
-                              This can contain arbitrary JSON data. Secret values
-                              should not be specified in this stanza. If secret values
-                              are needed (e.g. credentials for a DNS service), you
-                              should use a SecretKeySelector to reference a Secret
-                              resource. For details on the schema of this field, consult
-                              the webhook provider implementation's documentation.
-                            x-kubernetes-preserve-unknown-fields: true
-                          groupName:
-                            description: The API group name that should be used when
-                              POSTing ChallengePayload resources to the webhook apiserver.
-                              This should be the same as the GroupName specified in
-                              the webhook provider implementation.
-                            type: string
-                          solverName:
-                            description: The name of the solver to use, as defined
-                              in the webhook provider implementation. This will typically
-                              be the name of the provider, e.g. 'cloudflare'.
-                            type: string
-                        required:
-                        - groupName
-                        - solverName
-                        type: object
-                    type: object
-                  http01:
-                    description: Configures cert-manager to attempt to complete authorizations
-                      by performing the HTTP01 challenge flow. It is not possible
-                      to obtain certificates for wildcard domain names (e.g. `*.example.com`)
-                      using the HTTP01 challenge mechanism.
-                    properties:
-                      gatewayHTTPRoute:
-                        description: The Gateway API is a sig-network community API
-                          that models service networking in Kubernetes (https://gateway-api.sigs.k8s.io/).
-                          The Gateway solver will create HTTPRoutes with the specified
-                          labels in the same namespace as the challenge. This solver
-                          is experimental, and fields / behaviour may change in the
-                          future.
-                        properties:
-                          labels:
-                            additionalProperties:
-                              type: string
-                            description: Custom labels that will be applied to HTTPRoutes
-                              created by cert-manager while solving HTTP-01 challenges.
-                            type: object
-                          parentRefs:
-                            description: 'When solving an HTTP-01 challenge, cert-manager
-                              creates an HTTPRoute. cert-manager needs to know which
-                              parentRefs should be used when creating the HTTPRoute.
-                              Usually, the parentRef references a Gateway. See: https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways'
-                            items:
-                              description: "ParentReference identifies an API object
-                                (usually a Gateway) that can be considered a parent
-                                of this resource (usually a route). The only kind
-                                of parent resource with \"Core\" support is Gateway.
-                                This API may be extended in the future to support
-                                additional kinds of parent resources, such as HTTPRoute.
-                                \n The API object must be valid in the cluster; the
-                                Group and Kind must be registered in the cluster for
-                                this reference to be valid."
-                              properties:
-                                group:
-                                  default: gateway.networking.k8s.io
-                                  description: "Group is the group of the referent.
-                                    When unspecified, \"gateway.networking.k8s.io\"
-                                    is inferred. To set the core API group (such as
-                                    for a \"Service\" kind referent), Group must be
-                                    explicitly set to \"\" (empty string). \n Support:
-                                    Core"
-                                  maxLength: 253
-                                  pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
-                                  type: string
-                                kind:
-                                  default: Gateway
-                                  description: "Kind is kind of the referent. \n Support:
-                                    Core (Gateway) \n Support: Implementation-specific
-                                    (Other Resources)"
-                                  maxLength: 63
-                                  minLength: 1
-                                  pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
-                                  type: string
-                                name:
-                                  description: "Name is the name of the referent.
-                                    \n Support: Core"
-                                  maxLength: 253
-                                  minLength: 1
-                                  type: string
-                                namespace:
-                                  description: "Namespace is the namespace of the
-                                    referent. When unspecified, this refers to the
-                                    local namespace of the Route. \n Note that there
-                                    are specific rules for ParentRefs which cross
-                                    namespace boundaries. Cross-namespace references
-                                    are only valid if they are explicitly allowed
-                                    by something in the namespace they are referring
-                                    to. For example: Gateway has the AllowedRoutes
-                                    field, and ReferenceGrant provides a generic way
-                                    to enable any other kind of cross-namespace reference.
-                                    \n Support: Core"
-                                  maxLength: 63
-                                  minLength: 1
-                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
-                                  type: string
-                                port:
-                                  description: "Port is the network port this Route
-                                    targets. It can be interpreted differently based
-                                    on the type of parent resource. \n When the parent
-                                    resource is a Gateway, this targets all listeners
-                                    listening on the specified port that also support
-                                    this kind of Route(and select this Route). It's
-                                    not recommended to set `Port` unless the networking
-                                    behaviors specified in a Route must apply to a
-                                    specific port as opposed to a listener(s) whose
-                                    port(s) may be changed. When both Port and SectionName
-                                    are specified, the name and port of the selected
-                                    listener must match both specified values. \n
-                                    Implementations MAY choose to support other parent
-                                    resources. Implementations supporting other types
-                                    of parent resources MUST clearly document how/if
-                                    Port is interpreted. \n For the purpose of status,
-                                    an attachment is considered successful as long
-                                    as the parent resource accepts it partially. For
-                                    example, Gateway listeners can restrict which
-                                    Routes can attach to them by Route kind, namespace,
-                                    or hostname. If 1 of 2 Gateway listeners accept
-                                    attachment from the referencing Route, the Route
-                                    MUST be considered successfully attached. If no
-                                    Gateway listeners accept attachment from this
-                                    Route, the Route MUST be considered detached from
-                                    the Gateway. \n Support: Extended \n <gateway:experimental>"
-                                  format: int32
-                                  maximum: 65535
-                                  minimum: 1
-                                  type: integer
-                                sectionName:
-                                  description: "SectionName is the name of a section
-                                    within the target resource. In the following resources,
-                                    SectionName is interpreted as the following: \n
-                                    * Gateway: Listener Name. When both Port (experimental)
-                                    and SectionName are specified, the name and port
-                                    of the selected listener must match both specified
-                                    values. \n Implementations MAY choose to support
-                                    attaching Routes to other resources. If that is
-                                    the case, they MUST clearly document how SectionName
-                                    is interpreted. \n When unspecified (empty string),
-                                    this will reference the entire resource. For the
-                                    purpose of status, an attachment is considered
-                                    successful if at least one section in the parent
-                                    resource accepts it. For example, Gateway listeners
-                                    can restrict which Routes can attach to them by
-                                    Route kind, namespace, or hostname. If 1 of 2
-                                    Gateway listeners accept attachment from the referencing
-                                    Route, the Route MUST be considered successfully
-                                    attached. If no Gateway listeners accept attachment
-                                    from this Route, the Route MUST be considered
-                                    detached from the Gateway. \n Support: Core"
-                                  maxLength: 253
-                                  minLength: 1
-                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
-                                  type: string
-                              required:
-                              - name
-                              type: object
-                            type: array
-                          serviceType:
-                            description: Optional service type for Kubernetes solver
-                              service. Supported values are NodePort or ClusterIP.
-                              If unset, defaults to NodePort.
-                            type: string
-                        type: object
-                      ingress:
-                        description: The ingress based HTTP01 challenge solver will
-                          solve challenges by creating or modifying Ingress resources
-                          in order to route requests for '/.well-known/acme-challenge/XYZ'
-                          to 'challenge solver' pods that are provisioned by cert-manager
-                          for each Challenge to be completed.
-                        properties:
-                          class:
-                            description: This field configures the annotation `kubernetes.io/ingress.class`
-                              when creating Ingress resources to solve ACME challenges
-                              that use this challenge solver. Only one of `class`,
-                              `name` or `ingressClassName` may be specified.
-                            type: string
-                          ingressClassName:
-                            description: This field configures the field `ingressClassName`
-                              on the created Ingress resources used to solve ACME
-                              challenges that use this challenge solver. This is the
-                              recommended way of configuring the ingress class. Only
-                              one of `class`, `name` or `ingressClassName` may be
-                              specified.
-                            type: string
-                          ingressTemplate:
-                            description: Optional ingress template used to configure
-                              the ACME challenge solver ingress used for HTTP01 challenges.
-                            properties:
-                              metadata:
-                                description: ObjectMeta overrides for the ingress
-                                  used to solve HTTP01 challenges. Only the 'labels'
-                                  and 'annotations' fields may be set. If labels or
-                                  annotations overlap with in-built values, the values
-                                  here will override the in-built values.
-                                properties:
-                                  annotations:
-                                    additionalProperties:
-                                      type: string
-                                    description: Annotations that should be added
-                                      to the created ACME HTTP01 solver ingress.
-                                    type: object
-                                  labels:
-                                    additionalProperties:
-                                      type: string
-                                    description: Labels that should be added to the
-                                      created ACME HTTP01 solver ingress.
-                                    type: object
-                                type: object
-                            type: object
-                          name:
-                            description: The name of the ingress resource that should
-                              have ACME challenge solving routes inserted into it
-                              in order to solve HTTP01 challenges. This is typically
-                              used in conjunction with ingress controllers like ingress-gce,
-                              which maintains a 1:1 mapping between external IPs and
-                              ingress resources. Only one of `class`, `name` or `ingressClassName`
-                              may be specified.
-                            type: string
-                          podTemplate:
-                            description: Optional pod template used to configure the
-                              ACME challenge solver pods used for HTTP01 challenges.
-                            properties:
-                              metadata:
-                                description: ObjectMeta overrides for the pod used
-                                  to solve HTTP01 challenges. Only the 'labels' and
-                                  'annotations' fields may be set. If labels or annotations
-                                  overlap with in-built values, the values here will
-                                  override the in-built values.
-                                properties:
-                                  annotations:
-                                    additionalProperties:
-                                      type: string
-                                    description: Annotations that should be added
-                                      to the create ACME HTTP01 solver pods.
-                                    type: object
-                                  labels:
-                                    additionalProperties:
-                                      type: string
-                                    description: Labels that should be added to the
-                                      created ACME HTTP01 solver pods.
-                                    type: object
-                                type: object
-                              spec:
-                                description: PodSpec defines overrides for the HTTP01
-                                  challenge solver pod. Check ACMEChallengeSolverHTTP01IngressPodSpec
-                                  to find out currently supported fields. All other
-                                  fields will be ignored.
-                                properties:
-                                  affinity:
-                                    description: If specified, the pod's scheduling
-                                      constraints
-                                    properties:
-                                      nodeAffinity:
-                                        description: Describes node affinity scheduling
-                                          rules for the pod.
-                                        properties:
-                                          preferredDuringSchedulingIgnoredDuringExecution:
-                                            description: The scheduler will prefer
-                                              to schedule pods to nodes that satisfy
-                                              the affinity expressions specified by
-                                              this field, but it may choose a node
-                                              that violates one or more of the expressions.
-                                              The node that is most preferred is the
-                                              one with the greatest sum of weights,
-                                              i.e. for each node that meets all of
-                                              the scheduling requirements (resource
-                                              request, requiredDuringScheduling affinity
-                                              expressions, etc.), compute a sum by
-                                              iterating through the elements of this
-                                              field and adding "weight" to the sum
-                                              if the node matches the corresponding
-                                              matchExpressions; the node(s) with the
-                                              highest sum are the most preferred.
-                                            items:
-                                              description: An empty preferred scheduling
-                                                term matches all objects with implicit
-                                                weight 0 (i.e. it's a no-op). A null
-                                                preferred scheduling term matches
-                                                no objects (i.e. is also a no-op).
-                                              properties:
-                                                preference:
-                                                  description: A node selector term,
-                                                    associated with the corresponding
-                                                    weight.
-                                                  properties:
-                                                    matchExpressions:
-                                                      description: A list of node
-                                                        selector requirements by node's
-                                                        labels.
-                                                      items:
-                                                        description: A node selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: The label
-                                                              key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: Represents
-                                                              a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists, DoesNotExist.
-                                                              Gt, and Lt.
-                                                            type: string
-                                                          values:
-                                                            description: An array
-                                                              of string values. If
-                                                              the operator is In or
-                                                              NotIn, the values array
-                                                              must be non-empty. If
-                                                              the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. If the operator
-                                                              is Gt or Lt, the values
-                                                              array must have a single
-                                                              element, which will
-                                                              be interpreted as an
-                                                              integer. This array
-                                                              is replaced during a
-                                                              strategic merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                    matchFields:
-                                                      description: A list of node
-                                                        selector requirements by node's
-                                                        fields.
-                                                      items:
-                                                        description: A node selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: The label
-                                                              key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: Represents
-                                                              a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists, DoesNotExist.
-                                                              Gt, and Lt.
-                                                            type: string
-                                                          values:
-                                                            description: An array
-                                                              of string values. If
-                                                              the operator is In or
-                                                              NotIn, the values array
-                                                              must be non-empty. If
-                                                              the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. If the operator
-                                                              is Gt or Lt, the values
-                                                              array must have a single
-                                                              element, which will
-                                                              be interpreted as an
-                                                              integer. This array
-                                                              is replaced during a
-                                                              strategic merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                                weight:
-                                                  description: Weight associated with
-                                                    matching the corresponding nodeSelectorTerm,
-                                                    in the range 1-100.
-                                                  format: int32
-                                                  type: integer
-                                              required:
-                                              - preference
-                                              - weight
-                                              type: object
-                                            type: array
-                                          requiredDuringSchedulingIgnoredDuringExecution:
-                                            description: If the affinity requirements
-                                              specified by this field are not met
-                                              at scheduling time, the pod will not
-                                              be scheduled onto the node. If the affinity
-                                              requirements specified by this field
-                                              cease to be met at some point during
-                                              pod execution (e.g. due to an update),
-                                              the system may or may not try to eventually
-                                              evict the pod from its node.
-                                            properties:
-                                              nodeSelectorTerms:
-                                                description: Required. A list of node
-                                                  selector terms. The terms are ORed.
-                                                items:
-                                                  description: A null or empty node
-                                                    selector term matches no objects.
-                                                    The requirements of them are ANDed.
-                                                    The TopologySelectorTerm type
-                                                    implements a subset of the NodeSelectorTerm.
-                                                  properties:
-                                                    matchExpressions:
-                                                      description: A list of node
-                                                        selector requirements by node's
-                                                        labels.
-                                                      items:
-                                                        description: A node selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: The label
-                                                              key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: Represents
-                                                              a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists, DoesNotExist.
-                                                              Gt, and Lt.
-                                                            type: string
-                                                          values:
-                                                            description: An array
-                                                              of string values. If
-                                                              the operator is In or
-                                                              NotIn, the values array
-                                                              must be non-empty. If
-                                                              the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. If the operator
-                                                              is Gt or Lt, the values
-                                                              array must have a single
-                                                              element, which will
-                                                              be interpreted as an
-                                                              integer. This array
-                                                              is replaced during a
-                                                              strategic merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                    matchFields:
-                                                      description: A list of node
-                                                        selector requirements by node's
-                                                        fields.
-                                                      items:
-                                                        description: A node selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: The label
-                                                              key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: Represents
-                                                              a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists, DoesNotExist.
-                                                              Gt, and Lt.
-                                                            type: string
-                                                          values:
-                                                            description: An array
-                                                              of string values. If
-                                                              the operator is In or
-                                                              NotIn, the values array
-                                                              must be non-empty. If
-                                                              the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. If the operator
-                                                              is Gt or Lt, the values
-                                                              array must have a single
-                                                              element, which will
-                                                              be interpreted as an
-                                                              integer. This array
-                                                              is replaced during a
-                                                              strategic merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                                type: array
-                                            required:
-                                            - nodeSelectorTerms
-                                            type: object
-                                            x-kubernetes-map-type: atomic
-                                        type: object
-                                      podAffinity:
-                                        description: Describes pod affinity scheduling
-                                          rules (e.g. co-locate this pod in the same
-                                          node, zone, etc. as some other pod(s)).
-                                        properties:
-                                          preferredDuringSchedulingIgnoredDuringExecution:
-                                            description: The scheduler will prefer
-                                              to schedule pods to nodes that satisfy
-                                              the affinity expressions specified by
-                                              this field, but it may choose a node
-                                              that violates one or more of the expressions.
-                                              The node that is most preferred is the
-                                              one with the greatest sum of weights,
-                                              i.e. for each node that meets all of
-                                              the scheduling requirements (resource
-                                              request, requiredDuringScheduling affinity
-                                              expressions, etc.), compute a sum by
-                                              iterating through the elements of this
-                                              field and adding "weight" to the sum
-                                              if the node has pods which matches the
-                                              corresponding podAffinityTerm; the node(s)
-                                              with the highest sum are the most preferred.
-                                            items:
-                                              description: The weights of all of the
-                                                matched WeightedPodAffinityTerm fields
-                                                are added per-node to find the most
-                                                preferred node(s)
-                                              properties:
-                                                podAffinityTerm:
-                                                  description: Required. A pod affinity
-                                                    term, associated with the corresponding
-                                                    weight.
-                                                  properties:
-                                                    labelSelector:
-                                                      description: A label query over
-                                                        a set of resources, in this
-                                                        case pods.
-                                                      properties:
-                                                        matchExpressions:
-                                                          description: matchExpressions
-                                                            is a list of label selector
-                                                            requirements. The requirements
-                                                            are ANDed.
-                                                          items:
-                                                            description: A label selector
-                                                              requirement is a selector
-                                                              that contains values,
-                                                              a key, and an operator
-                                                              that relates the key
-                                                              and values.
-                                                            properties:
-                                                              key:
-                                                                description: key is
-                                                                  the label key that
-                                                                  the selector applies
-                                                                  to.
-                                                                type: string
-                                                              operator:
-                                                                description: operator
-                                                                  represents a key's
-                                                                  relationship to
-                                                                  a set of values.
-                                                                  Valid operators
-                                                                  are In, NotIn, Exists
-                                                                  and DoesNotExist.
-                                                                type: string
-                                                              values:
-                                                                description: values
-                                                                  is an array of string
-                                                                  values. If the operator
-                                                                  is In or NotIn,
-                                                                  the values array
-                                                                  must be non-empty.
-                                                                  If the operator
-                                                                  is Exists or DoesNotExist,
-                                                                  the values array
-                                                                  must be empty. This
-                                                                  array is replaced
-                                                                  during a strategic
-                                                                  merge patch.
-                                                                items:
-                                                                  type: string
-                                                                type: array
-                                                            required:
-                                                            - key
-                                                            - operator
-                                                            type: object
-                                                          type: array
-                                                        matchLabels:
-                                                          additionalProperties:
-                                                            type: string
-                                                          description: matchLabels
-                                                            is a map of {key,value}
-                                                            pairs. A single {key,value}
-                                                            in the matchLabels map
-                                                            is equivalent to an element
-                                                            of matchExpressions, whose
-                                                            key field is "key", the
-                                                            operator is "In", and
-                                                            the values array contains
-                                                            only "value". The requirements
-                                                            are ANDed.
-                                                          type: object
-                                                      type: object
-                                                      x-kubernetes-map-type: atomic
-                                                    namespaceSelector:
-                                                      description: A label query over
-                                                        the set of namespaces that
-                                                        the term applies to. The term
-                                                        is applied to the union of
-                                                        the namespaces selected by
-                                                        this field and the ones listed
-                                                        in the namespaces field. null
-                                                        selector and null or empty
-                                                        namespaces list means "this
-                                                        pod's namespace". An empty
-                                                        selector ({}) matches all
-                                                        namespaces.
-                                                      properties:
-                                                        matchExpressions:
-                                                          description: matchExpressions
-                                                            is a list of label selector
-                                                            requirements. The requirements
-                                                            are ANDed.
-                                                          items:
-                                                            description: A label selector
-                                                              requirement is a selector
-                                                              that contains values,
-                                                              a key, and an operator
-                                                              that relates the key
-                                                              and values.
-                                                            properties:
-                                                              key:
-                                                                description: key is
-                                                                  the label key that
-                                                                  the selector applies
-                                                                  to.
-                                                                type: string
-                                                              operator:
-                                                                description: operator
-                                                                  represents a key's
-                                                                  relationship to
-                                                                  a set of values.
-                                                                  Valid operators
-                                                                  are In, NotIn, Exists
-                                                                  and DoesNotExist.
-                                                                type: string
-                                                              values:
-                                                                description: values
-                                                                  is an array of string
-                                                                  values. If the operator
-                                                                  is In or NotIn,
-                                                                  the values array
-                                                                  must be non-empty.
-                                                                  If the operator
-                                                                  is Exists or DoesNotExist,
-                                                                  the values array
-                                                                  must be empty. This
-                                                                  array is replaced
-                                                                  during a strategic
-                                                                  merge patch.
-                                                                items:
-                                                                  type: string
-                                                                type: array
-                                                            required:
-                                                            - key
-                                                            - operator
-                                                            type: object
-                                                          type: array
-                                                        matchLabels:
-                                                          additionalProperties:
-                                                            type: string
-                                                          description: matchLabels
-                                                            is a map of {key,value}
-                                                            pairs. A single {key,value}
-                                                            in the matchLabels map
-                                                            is equivalent to an element
-                                                            of matchExpressions, whose
-                                                            key field is "key", the
-                                                            operator is "In", and
-                                                            the values array contains
-                                                            only "value". The requirements
-                                                            are ANDed.
-                                                          type: object
-                                                      type: object
-                                                      x-kubernetes-map-type: atomic
-                                                    namespaces:
-                                                      description: namespaces specifies
-                                                        a static list of namespace
-                                                        names that the term applies
-                                                        to. The term is applied to
-                                                        the union of the namespaces
-                                                        listed in this field and the
-                                                        ones selected by namespaceSelector.
-                                                        null or empty namespaces list
-                                                        and null namespaceSelector
-                                                        means "this pod's namespace".
-                                                      items:
-                                                        type: string
-                                                      type: array
-                                                    topologyKey:
-                                                      description: This pod should
-                                                        be co-located (affinity) or
-                                                        not co-located (anti-affinity)
-                                                        with the pods matching the
-                                                        labelSelector in the specified
-                                                        namespaces, where co-located
-                                                        is defined as running on a
-                                                        node whose value of the label
-                                                        with key topologyKey matches
-                                                        that of any node on which
-                                                        any of the selected pods is
-                                                        running. Empty topologyKey
-                                                        is not allowed.
-                                                      type: string
-                                                  required:
-                                                  - topologyKey
-                                                  type: object
-                                                weight:
-                                                  description: weight associated with
-                                                    matching the corresponding podAffinityTerm,
-                                                    in the range 1-100.
-                                                  format: int32
-                                                  type: integer
-                                              required:
-                                              - podAffinityTerm
-                                              - weight
-                                              type: object
-                                            type: array
-                                          requiredDuringSchedulingIgnoredDuringExecution:
-                                            description: If the affinity requirements
-                                              specified by this field are not met
-                                              at scheduling time, the pod will not
-                                              be scheduled onto the node. If the affinity
-                                              requirements specified by this field
-                                              cease to be met at some point during
-                                              pod execution (e.g. due to a pod label
-                                              update), the system may or may not try
-                                              to eventually evict the pod from its
-                                              node. When there are multiple elements,
-                                              the lists of nodes corresponding to
-                                              each podAffinityTerm are intersected,
-                                              i.e. all terms must be satisfied.
-                                            items:
-                                              description: Defines a set of pods (namely
-                                                those matching the labelSelector relative
-                                                to the given namespace(s)) that this
-                                                pod should be co-located (affinity)
-                                                or not co-located (anti-affinity)
-                                                with, where co-located is defined
-                                                as running on a node whose value of
-                                                the label with key <topologyKey> matches
-                                                that of any node on which a pod of
-                                                the set of pods is running
-                                              properties:
-                                                labelSelector:
-                                                  description: A label query over
-                                                    a set of resources, in this case
-                                                    pods.
-                                                  properties:
-                                                    matchExpressions:
-                                                      description: matchExpressions
-                                                        is a list of label selector
-                                                        requirements. The requirements
-                                                        are ANDed.
-                                                      items:
-                                                        description: A label selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: key is the
-                                                              label key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: operator
-                                                              represents a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists and
-                                                              DoesNotExist.
-                                                            type: string
-                                                          values:
-                                                            description: values is
-                                                              an array of string values.
-                                                              If the operator is In
-                                                              or NotIn, the values
-                                                              array must be non-empty.
-                                                              If the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. This array is
-                                                              replaced during a strategic
-                                                              merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                    matchLabels:
-                                                      additionalProperties:
-                                                        type: string
-                                                      description: matchLabels is
-                                                        a map of {key,value} pairs.
-                                                        A single {key,value} in the
-                                                        matchLabels map is equivalent
-                                                        to an element of matchExpressions,
-                                                        whose key field is "key",
-                                                        the operator is "In", and
-                                                        the values array contains
-                                                        only "value". The requirements
-                                                        are ANDed.
-                                                      type: object
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                                namespaceSelector:
-                                                  description: A label query over
-                                                    the set of namespaces that the
-                                                    term applies to. The term is applied
-                                                    to the union of the namespaces
-                                                    selected by this field and the
-                                                    ones listed in the namespaces
-                                                    field. null selector and null
-                                                    or empty namespaces list means
-                                                    "this pod's namespace". An empty
-                                                    selector ({}) matches all namespaces.
-                                                  properties:
-                                                    matchExpressions:
-                                                      description: matchExpressions
-                                                        is a list of label selector
-                                                        requirements. The requirements
-                                                        are ANDed.
-                                                      items:
-                                                        description: A label selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: key is the
-                                                              label key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: operator
-                                                              represents a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists and
-                                                              DoesNotExist.
-                                                            type: string
-                                                          values:
-                                                            description: values is
-                                                              an array of string values.
-                                                              If the operator is In
-                                                              or NotIn, the values
-                                                              array must be non-empty.
-                                                              If the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. This array is
-                                                              replaced during a strategic
-                                                              merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                    matchLabels:
-                                                      additionalProperties:
-                                                        type: string
-                                                      description: matchLabels is
-                                                        a map of {key,value} pairs.
-                                                        A single {key,value} in the
-                                                        matchLabels map is equivalent
-                                                        to an element of matchExpressions,
-                                                        whose key field is "key",
-                                                        the operator is "In", and
-                                                        the values array contains
-                                                        only "value". The requirements
-                                                        are ANDed.
-                                                      type: object
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                                namespaces:
-                                                  description: namespaces specifies
-                                                    a static list of namespace names
-                                                    that the term applies to. The
-                                                    term is applied to the union of
-                                                    the namespaces listed in this
-                                                    field and the ones selected by
-                                                    namespaceSelector. null or empty
-                                                    namespaces list and null namespaceSelector
-                                                    means "this pod's namespace".
-                                                  items:
-                                                    type: string
-                                                  type: array
-                                                topologyKey:
-                                                  description: This pod should be
-                                                    co-located (affinity) or not co-located
-                                                    (anti-affinity) with the pods
-                                                    matching the labelSelector in
-                                                    the specified namespaces, where
-                                                    co-located is defined as running
-                                                    on a node whose value of the label
-                                                    with key topologyKey matches that
-                                                    of any node on which any of the
-                                                    selected pods is running. Empty
-                                                    topologyKey is not allowed.
-                                                  type: string
-                                              required:
-                                              - topologyKey
-                                              type: object
-                                            type: array
-                                        type: object
-                                      podAntiAffinity:
-                                        description: Describes pod anti-affinity scheduling
-                                          rules (e.g. avoid putting this pod in the
-                                          same node, zone, etc. as some other pod(s)).
-                                        properties:
-                                          preferredDuringSchedulingIgnoredDuringExecution:
-                                            description: The scheduler will prefer
-                                              to schedule pods to nodes that satisfy
-                                              the anti-affinity expressions specified
-                                              by this field, but it may choose a node
-                                              that violates one or more of the expressions.
-                                              The node that is most preferred is the
-                                              one with the greatest sum of weights,
-                                              i.e. for each node that meets all of
-                                              the scheduling requirements (resource
-                                              request, requiredDuringScheduling anti-affinity
-                                              expressions, etc.), compute a sum by
-                                              iterating through the elements of this
-                                              field and adding "weight" to the sum
-                                              if the node has pods which matches the
-                                              corresponding podAffinityTerm; the node(s)
-                                              with the highest sum are the most preferred.
-                                            items:
-                                              description: The weights of all of the
-                                                matched WeightedPodAffinityTerm fields
-                                                are added per-node to find the most
-                                                preferred node(s)
-                                              properties:
-                                                podAffinityTerm:
-                                                  description: Required. A pod affinity
-                                                    term, associated with the corresponding
-                                                    weight.
-                                                  properties:
-                                                    labelSelector:
-                                                      description: A label query over
-                                                        a set of resources, in this
-                                                        case pods.
-                                                      properties:
-                                                        matchExpressions:
-                                                          description: matchExpressions
-                                                            is a list of label selector
-                                                            requirements. The requirements
-                                                            are ANDed.
-                                                          items:
-                                                            description: A label selector
-                                                              requirement is a selector
-                                                              that contains values,
-                                                              a key, and an operator
-                                                              that relates the key
-                                                              and values.
-                                                            properties:
-                                                              key:
-                                                                description: key is
-                                                                  the label key that
-                                                                  the selector applies
-                                                                  to.
-                                                                type: string
-                                                              operator:
-                                                                description: operator
-                                                                  represents a key's
-                                                                  relationship to
-                                                                  a set of values.
-                                                                  Valid operators
-                                                                  are In, NotIn, Exists
-                                                                  and DoesNotExist.
-                                                                type: string
-                                                              values:
-                                                                description: values
-                                                                  is an array of string
-                                                                  values. If the operator
-                                                                  is In or NotIn,
-                                                                  the values array
-                                                                  must be non-empty.
-                                                                  If the operator
-                                                                  is Exists or DoesNotExist,
-                                                                  the values array
-                                                                  must be empty. This
-                                                                  array is replaced
-                                                                  during a strategic
-                                                                  merge patch.
-                                                                items:
-                                                                  type: string
-                                                                type: array
-                                                            required:
-                                                            - key
-                                                            - operator
-                                                            type: object
-                                                          type: array
-                                                        matchLabels:
-                                                          additionalProperties:
-                                                            type: string
-                                                          description: matchLabels
-                                                            is a map of {key,value}
-                                                            pairs. A single {key,value}
-                                                            in the matchLabels map
-                                                            is equivalent to an element
-                                                            of matchExpressions, whose
-                                                            key field is "key", the
-                                                            operator is "In", and
-                                                            the values array contains
-                                                            only "value". The requirements
-                                                            are ANDed.
-                                                          type: object
-                                                      type: object
-                                                      x-kubernetes-map-type: atomic
-                                                    namespaceSelector:
-                                                      description: A label query over
-                                                        the set of namespaces that
-                                                        the term applies to. The term
-                                                        is applied to the union of
-                                                        the namespaces selected by
-                                                        this field and the ones listed
-                                                        in the namespaces field. null
-                                                        selector and null or empty
-                                                        namespaces list means "this
-                                                        pod's namespace". An empty
-                                                        selector ({}) matches all
-                                                        namespaces.
-                                                      properties:
-                                                        matchExpressions:
-                                                          description: matchExpressions
-                                                            is a list of label selector
-                                                            requirements. The requirements
-                                                            are ANDed.
-                                                          items:
-                                                            description: A label selector
-                                                              requirement is a selector
-                                                              that contains values,
-                                                              a key, and an operator
-                                                              that relates the key
-                                                              and values.
-                                                            properties:
-                                                              key:
-                                                                description: key is
-                                                                  the label key that
-                                                                  the selector applies
-                                                                  to.
-                                                                type: string
-                                                              operator:
-                                                                description: operator
-                                                                  represents a key's
-                                                                  relationship to
-                                                                  a set of values.
-                                                                  Valid operators
-                                                                  are In, NotIn, Exists
-                                                                  and DoesNotExist.
-                                                                type: string
-                                                              values:
-                                                                description: values
-                                                                  is an array of string
-                                                                  values. If the operator
-                                                                  is In or NotIn,
-                                                                  the values array
-                                                                  must be non-empty.
-                                                                  If the operator
-                                                                  is Exists or DoesNotExist,
-                                                                  the values array
-                                                                  must be empty. This
-                                                                  array is replaced
-                                                                  during a strategic
-                                                                  merge patch.
-                                                                items:
-                                                                  type: string
-                                                                type: array
-                                                            required:
-                                                            - key
-                                                            - operator
-                                                            type: object
-                                                          type: array
-                                                        matchLabels:
-                                                          additionalProperties:
-                                                            type: string
-                                                          description: matchLabels
-                                                            is a map of {key,value}
-                                                            pairs. A single {key,value}
-                                                            in the matchLabels map
-                                                            is equivalent to an element
-                                                            of matchExpressions, whose
-                                                            key field is "key", the
-                                                            operator is "In", and
-                                                            the values array contains
-                                                            only "value". The requirements
-                                                            are ANDed.
-                                                          type: object
-                                                      type: object
-                                                      x-kubernetes-map-type: atomic
-                                                    namespaces:
-                                                      description: namespaces specifies
-                                                        a static list of namespace
-                                                        names that the term applies
-                                                        to. The term is applied to
-                                                        the union of the namespaces
-                                                        listed in this field and the
-                                                        ones selected by namespaceSelector.
-                                                        null or empty namespaces list
-                                                        and null namespaceSelector
-                                                        means "this pod's namespace".
-                                                      items:
-                                                        type: string
-                                                      type: array
-                                                    topologyKey:
-                                                      description: This pod should
-                                                        be co-located (affinity) or
-                                                        not co-located (anti-affinity)
-                                                        with the pods matching the
-                                                        labelSelector in the specified
-                                                        namespaces, where co-located
-                                                        is defined as running on a
-                                                        node whose value of the label
-                                                        with key topologyKey matches
-                                                        that of any node on which
-                                                        any of the selected pods is
-                                                        running. Empty topologyKey
-                                                        is not allowed.
-                                                      type: string
-                                                  required:
-                                                  - topologyKey
-                                                  type: object
-                                                weight:
-                                                  description: weight associated with
-                                                    matching the corresponding podAffinityTerm,
-                                                    in the range 1-100.
-                                                  format: int32
-                                                  type: integer
-                                              required:
-                                              - podAffinityTerm
-                                              - weight
-                                              type: object
-                                            type: array
-                                          requiredDuringSchedulingIgnoredDuringExecution:
-                                            description: If the anti-affinity requirements
-                                              specified by this field are not met
-                                              at scheduling time, the pod will not
-                                              be scheduled onto the node. If the anti-affinity
-                                              requirements specified by this field
-                                              cease to be met at some point during
-                                              pod execution (e.g. due to a pod label
-                                              update), the system may or may not try
-                                              to eventually evict the pod from its
-                                              node. When there are multiple elements,
-                                              the lists of nodes corresponding to
-                                              each podAffinityTerm are intersected,
-                                              i.e. all terms must be satisfied.
-                                            items:
-                                              description: Defines a set of pods (namely
-                                                those matching the labelSelector relative
-                                                to the given namespace(s)) that this
-                                                pod should be co-located (affinity)
-                                                or not co-located (anti-affinity)
-                                                with, where co-located is defined
-                                                as running on a node whose value of
-                                                the label with key <topologyKey> matches
-                                                that of any node on which a pod of
-                                                the set of pods is running
-                                              properties:
-                                                labelSelector:
-                                                  description: A label query over
-                                                    a set of resources, in this case
-                                                    pods.
-                                                  properties:
-                                                    matchExpressions:
-                                                      description: matchExpressions
-                                                        is a list of label selector
-                                                        requirements. The requirements
-                                                        are ANDed.
-                                                      items:
-                                                        description: A label selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: key is the
-                                                              label key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: operator
-                                                              represents a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists and
-                                                              DoesNotExist.
-                                                            type: string
-                                                          values:
-                                                            description: values is
-                                                              an array of string values.
-                                                              If the operator is In
-                                                              or NotIn, the values
-                                                              array must be non-empty.
-                                                              If the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. This array is
-                                                              replaced during a strategic
-                                                              merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                    matchLabels:
-                                                      additionalProperties:
-                                                        type: string
-                                                      description: matchLabels is
-                                                        a map of {key,value} pairs.
-                                                        A single {key,value} in the
-                                                        matchLabels map is equivalent
-                                                        to an element of matchExpressions,
-                                                        whose key field is "key",
-                                                        the operator is "In", and
-                                                        the values array contains
-                                                        only "value". The requirements
-                                                        are ANDed.
-                                                      type: object
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                                namespaceSelector:
-                                                  description: A label query over
-                                                    the set of namespaces that the
-                                                    term applies to. The term is applied
-                                                    to the union of the namespaces
-                                                    selected by this field and the
-                                                    ones listed in the namespaces
-                                                    field. null selector and null
-                                                    or empty namespaces list means
-                                                    "this pod's namespace". An empty
-                                                    selector ({}) matches all namespaces.
-                                                  properties:
-                                                    matchExpressions:
-                                                      description: matchExpressions
-                                                        is a list of label selector
-                                                        requirements. The requirements
-                                                        are ANDed.
-                                                      items:
-                                                        description: A label selector
-                                                          requirement is a selector
-                                                          that contains values, a
-                                                          key, and an operator that
-                                                          relates the key and values.
-                                                        properties:
-                                                          key:
-                                                            description: key is the
-                                                              label key that the selector
-                                                              applies to.
-                                                            type: string
-                                                          operator:
-                                                            description: operator
-                                                              represents a key's relationship
-                                                              to a set of values.
-                                                              Valid operators are
-                                                              In, NotIn, Exists and
-                                                              DoesNotExist.
-                                                            type: string
-                                                          values:
-                                                            description: values is
-                                                              an array of string values.
-                                                              If the operator is In
-                                                              or NotIn, the values
-                                                              array must be non-empty.
-                                                              If the operator is Exists
-                                                              or DoesNotExist, the
-                                                              values array must be
-                                                              empty. This array is
-                                                              replaced during a strategic
-                                                              merge patch.
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                        required:
-                                                        - key
-                                                        - operator
-                                                        type: object
-                                                      type: array
-                                                    matchLabels:
-                                                      additionalProperties:
-                                                        type: string
-                                                      description: matchLabels is
-                                                        a map of {key,value} pairs.
-                                                        A single {key,value} in the
-                                                        matchLabels map is equivalent
-                                                        to an element of matchExpressions,
-                                                        whose key field is "key",
-                                                        the operator is "In", and
-                                                        the values array contains
-                                                        only "value". The requirements
-                                                        are ANDed.
-                                                      type: object
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                                namespaces:
-                                                  description: namespaces specifies
-                                                    a static list of namespace names
-                                                    that the term applies to. The
-                                                    term is applied to the union of
-                                                    the namespaces listed in this
-                                                    field and the ones selected by
-                                                    namespaceSelector. null or empty
-                                                    namespaces list and null namespaceSelector
-                                                    means "this pod's namespace".
-                                                  items:
-                                                    type: string
-                                                  type: array
-                                                topologyKey:
-                                                  description: This pod should be
-                                                    co-located (affinity) or not co-located
-                                                    (anti-affinity) with the pods
-                                                    matching the labelSelector in
-                                                    the specified namespaces, where
-                                                    co-located is defined as running
-                                                    on a node whose value of the label
-                                                    with key topologyKey matches that
-                                                    of any node on which any of the
-                                                    selected pods is running. Empty
-                                                    topologyKey is not allowed.
-                                                  type: string
-                                              required:
-                                              - topologyKey
-                                              type: object
-                                            type: array
-                                        type: object
-                                    type: object
-                                  imagePullSecrets:
-                                    description: If specified, the pod's imagePullSecrets
-                                    items:
-                                      description: LocalObjectReference contains enough
-                                        information to let you locate the referenced
-                                        object inside the same namespace.
-                                      properties:
-                                        name:
-                                          description: 'Name of the referent. More
-                                            info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                            TODO: Add other useful fields. apiVersion,
-                                            kind, uid?'
-                                          type: string
-                                      type: object
-                                      x-kubernetes-map-type: atomic
-                                    type: array
-                                  nodeSelector:
-                                    additionalProperties:
-                                      type: string
-                                    description: 'NodeSelector is a selector which
-                                      must be true for the pod to fit on a node. Selector
-                                      which must match a node''s labels for the pod
-                                      to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
-                                    type: object
-                                  priorityClassName:
-                                    description: If specified, the pod's priorityClassName.
-                                    type: string
-                                  serviceAccountName:
-                                    description: If specified, the pod's service account
-                                    type: string
-                                  tolerations:
-                                    description: If specified, the pod's tolerations.
-                                    items:
-                                      description: The pod this Toleration is attached
-                                        to tolerates any taint that matches the triple
-                                        <key,value,effect> using the matching operator
-                                        <operator>.
-                                      properties:
-                                        effect:
-                                          description: Effect indicates the taint
-                                            effect to match. Empty means match all
-                                            taint effects. When specified, allowed
-                                            values are NoSchedule, PreferNoSchedule
-                                            and NoExecute.
-                                          type: string
-                                        key:
-                                          description: Key is the taint key that the
-                                            toleration applies to. Empty means match
-                                            all taint keys. If the key is empty, operator
-                                            must be Exists; this combination means
-                                            to match all values and all keys.
-                                          type: string
-                                        operator:
-                                          description: Operator represents a key's
-                                            relationship to the value. Valid operators
-                                            are Exists and Equal. Defaults to Equal.
-                                            Exists is equivalent to wildcard for value,
-                                            so that a pod can tolerate all taints
-                                            of a particular category.
-                                          type: string
-                                        tolerationSeconds:
-                                          description: TolerationSeconds represents
-                                            the period of time the toleration (which
-                                            must be of effect NoExecute, otherwise
-                                            this field is ignored) tolerates the taint.
-                                            By default, it is not set, which means
-                                            tolerate the taint forever (do not evict).
-                                            Zero and negative values will be treated
-                                            as 0 (evict immediately) by the system.
-                                          format: int64
-                                          type: integer
-                                        value:
-                                          description: Value is the taint value the
-                                            toleration matches to. If the operator
-                                            is Exists, the value should be empty,
-                                            otherwise just a regular string.
-                                          type: string
-                                      type: object
-                                    type: array
-                                type: object
-                            type: object
-                          serviceType:
-                            description: Optional service type for Kubernetes solver
-                              service. Supported values are NodePort or ClusterIP.
-                              If unset, defaults to NodePort.
-                            type: string
-                        type: object
-                    type: object
-                  selector:
-                    description: Selector selects a set of DNSNames on the Certificate
-                      resource that should be solved using this challenge solver.
-                      If not specified, the solver will be treated as the 'default'
-                      solver with the lowest priority, i.e. if any other solver has
-                      a more specific match, it will be used instead.
-                    properties:
-                      dnsNames:
-                        description: List of DNSNames that this solver will be used
-                          to solve. If specified and a match is found, a dnsNames
-                          selector will take precedence over a dnsZones selector.
-                          If multiple solvers match with the same dnsNames value,
-                          the solver with the most matching labels in matchLabels
-                          will be selected. If neither has more matches, the solver
-                          defined earlier in the list will be selected.
-                        items:
-                          type: string
-                        type: array
-                      dnsZones:
-                        description: List of DNSZones that this solver will be used
-                          to solve. The most specific DNS zone match specified here
-                          will take precedence over other DNS zone matches, so a solver
-                          specifying sys.example.com will be selected over one specifying
-                          example.com for the domain www.sys.example.com. If multiple
-                          solvers match with the same dnsZones value, the solver with
-                          the most matching labels in matchLabels will be selected.
-                          If neither has more matches, the solver defined earlier
-                          in the list will be selected.
-                        items:
-                          type: string
-                        type: array
-                      matchLabels:
-                        additionalProperties:
-                          type: string
-                        description: A label selector that is used to refine the set
-                          of certificate's that this challenge solver will apply to.
-                        type: object
-                    type: object
-                type: object
-              token:
-                description: The ACME challenge token for this challenge. This is
-                  the raw value returned from the ACME server.
-                type: string
-              type:
-                description: The type of ACME challenge this resource represents.
-                  One of "HTTP-01" or "DNS-01".
-                enum:
-                - HTTP-01
-                - DNS-01
-                type: string
-              url:
-                description: The URL of the ACME Challenge resource for this challenge.
-                  This can be used to lookup details about the status of this challenge.
-                type: string
-              wildcard:
-                description: wildcard will be true if this challenge is for a wildcard
-                  identifier, for example '*.example.com'.
-                type: boolean
-            required:
-            - authorizationURL
-            - dnsName
-            - issuerRef
-            - key
-            - solver
-            - token
-            - type
-            - url
-            type: object
-          status:
-            properties:
-              presented:
-                description: presented will be set to true if the challenge values
-                  for this challenge are currently 'presented'. This *does not* imply
-                  the self check is passing. Only that the values have been 'submitted'
-                  for the appropriate challenge mechanism (i.e. the DNS01 TXT record
-                  has been presented, or the HTTP01 configuration has been configured).
-                type: boolean
-              processing:
-                description: Used to denote whether this challenge should be processed
-                  or not. This field will only be set to true by the 'scheduling'
-                  component. It will only be set to false by the 'challenges' controller,
-                  after the challenge has reached a final state or timed out. If this
-                  field is set to false, the challenge controller will not take any
-                  more action.
-                type: boolean
-              reason:
-                description: Contains human readable information on why the Challenge
-                  is in the current state.
-                type: string
-              state:
-                description: Contains the current 'state' of the challenge. If not
-                  set, the state of the challenge is unknown.
-                enum:
-                - valid
-                - ready
-                - pending
-                - processing
-                - invalid
-                - expired
-                - errored
-                type: string
-            type: object
-        required:
-        - metadata
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: clusterissuers.cert-manager.io
-spec:
-  group: cert-manager.io
-  names:
-    categories:
-    - cert-manager
-    kind: ClusterIssuer
-    listKind: ClusterIssuerList
-    plural: clusterissuers
-    singular: clusterissuer
-  scope: Cluster
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .status.conditions[?(@.type=="Ready")].status
-      name: Ready
-      type: string
-    - jsonPath: .status.conditions[?(@.type=="Ready")].message
-      name: Status
-      priority: 1
-      type: string
-    - description: CreationTimestamp is a timestamp representing the server time when
-        this object was created. It is not guaranteed to be set in happens-before
-        order across separate operations. Clients may not set this value. It is represented
-        in RFC3339 form and is in UTC.
-      jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: A ClusterIssuer represents a certificate issuing authority which
-          can be referenced as part of `issuerRef` fields. It is similar to an Issuer,
-          however it is cluster-scoped and therefore can be referenced by resources
-          that exist in *any* namespace, not just the same namespace as the referent.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Desired state of the ClusterIssuer resource.
-            properties:
-              acme:
-                description: ACME configures this issuer to communicate with a RFC8555
-                  (ACME) server to obtain signed x509 certificates.
-                properties:
-                  caBundle:
-                    description: Base64-encoded bundle of PEM CAs which can be used
-                      to validate the certificate chain presented by the ACME server.
-                      Mutually exclusive with SkipTLSVerify; prefer using CABundle
-                      to prevent various kinds of security vulnerabilities. If CABundle
-                      and SkipTLSVerify are unset, the system certificate bundle inside
-                      the container is used to validate the TLS connection.
-                    format: byte
-                    type: string
-                  disableAccountKeyGeneration:
-                    description: Enables or disables generating a new ACME account
-                      key. If true, the Issuer resource will *not* request a new account
-                      but will expect the account key to be supplied via an existing
-                      secret. If false, the cert-manager system will generate a new
-                      ACME account key for the Issuer. Defaults to false.
-                    type: boolean
-                  email:
-                    description: Email is the email address to be associated with
-                      the ACME account. This field is optional, but it is strongly
-                      recommended to be set. It will be used to contact you in case
-                      of issues with your account or certificates, including expiry
-                      notification emails. This field may be updated after the account
-                      is initially registered.
-                    type: string
-                  enableDurationFeature:
-                    description: Enables requesting a Not After date on certificates
-                      that matches the duration of the certificate. This is not supported
-                      by all ACME servers like Let's Encrypt. If set to true when
-                      the ACME server does not support it it will create an error
-                      on the Order. Defaults to false.
-                    type: boolean
-                  externalAccountBinding:
-                    description: ExternalAccountBinding is a reference to a CA external
-                      account of the ACME server. If set, upon registration cert-manager
-                      will attempt to associate the given external account credentials
-                      with the registered ACME account.
-                    properties:
-                      keyAlgorithm:
-                        description: 'Deprecated: keyAlgorithm field exists for historical
-                          compatibility reasons and should not be used. The algorithm
-                          is now hardcoded to HS256 in golang/x/crypto/acme.'
-                        enum:
-                        - HS256
-                        - HS384
-                        - HS512
-                        type: string
-                      keyID:
-                        description: keyID is the ID of the CA key that the External
-                          Account is bound to.
-                        type: string
-                      keySecretRef:
-                        description: keySecretRef is a Secret Key Selector referencing
-                          a data item in a Kubernetes Secret which holds the symmetric
-                          MAC key of the External Account Binding. The `key` is the
-                          index string that is paired with the key data in the Secret
-                          and should not be confused with the key data itself, or
-                          indeed with the External Account Binding keyID above. The
-                          secret key stored in the Secret **must** be un-padded, base64
-                          URL encoded data.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                    required:
-                    - keyID
-                    - keySecretRef
-                    type: object
-                  preferredChain:
-                    description: 'PreferredChain is the chain to use if the ACME server
-                      outputs multiple. PreferredChain is no guarantee that this one
-                      gets delivered by the ACME endpoint. For example, for Let''s
-                      Encrypt''s DST crosssign you would use: "DST Root CA X3" or
-                      "ISRG Root X1" for the newer Let''s Encrypt root CA. This value
-                      picks the first certificate bundle in the ACME alternative chains
-                      that has a certificate with this value as its issuer''s CN'
-                    maxLength: 64
-                    type: string
-                  privateKeySecretRef:
-                    description: PrivateKey is the name of a Kubernetes Secret resource
-                      that will be used to store the automatically generated ACME
-                      account private key. Optionally, a `key` may be specified to
-                      select a specific entry within the named Secret resource. If
-                      `key` is not specified, a default of `tls.key` will be used.
-                    properties:
-                      key:
-                        description: The key of the entry in the Secret resource's
-                          `data` field to be used. Some instances of this field may
-                          be defaulted, in others it may be required.
-                        type: string
-                      name:
-                        description: 'Name of the resource being referred to. More
-                          info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                        type: string
-                    required:
-                    - name
-                    type: object
-                  server:
-                    description: 'Server is the URL used to access the ACME server''s
-                      ''directory'' endpoint. For example, for Let''s Encrypt''s staging
-                      endpoint, you would use: "https://acme-staging-v02.api.letsencrypt.org/directory".
-                      Only ACME v2 endpoints (i.e. RFC 8555) are supported.'
-                    type: string
-                  skipTLSVerify:
-                    description: 'INSECURE: Enables or disables validation of the
-                      ACME server TLS certificate. If true, requests to the ACME server
-                      will not have the TLS certificate chain validated. Mutually
-                      exclusive with CABundle; prefer using CABundle to prevent various
-                      kinds of security vulnerabilities. Only enable this option in
-                      development environments. If CABundle and SkipTLSVerify are
-                      unset, the system certificate bundle inside the container is
-                      used to validate the TLS connection. Defaults to false.'
-                    type: boolean
-                  solvers:
-                    description: 'Solvers is a list of challenge solvers that will
-                      be used to solve ACME challenges for the matching domains. Solver
-                      configurations must be provided in order to obtain certificates
-                      from an ACME server. For more information, see: https://cert-manager.io/docs/configuration/acme/'
-                    items:
-                      description: An ACMEChallengeSolver describes how to solve ACME
-                        challenges for the issuer it is part of. A selector may be
-                        provided to use different solving strategies for different
-                        DNS names. Only one of HTTP01 or DNS01 must be provided.
-                      properties:
-                        dns01:
-                          description: Configures cert-manager to attempt to complete
-                            authorizations by performing the DNS01 challenge flow.
-                          properties:
-                            acmeDNS:
-                              description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
-                                API to manage DNS01 challenge records.
-                              properties:
-                                accountSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                host:
-                                  type: string
-                              required:
-                              - accountSecretRef
-                              - host
-                              type: object
-                            akamai:
-                              description: Use the Akamai DNS zone management API
-                                to manage DNS01 challenge records.
-                              properties:
-                                accessTokenSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                clientSecretSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                clientTokenSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                serviceConsumerDomain:
-                                  type: string
-                              required:
-                              - accessTokenSecretRef
-                              - clientSecretSecretRef
-                              - clientTokenSecretRef
-                              - serviceConsumerDomain
-                              type: object
-                            azureDNS:
-                              description: Use the Microsoft Azure DNS API to manage
-                                DNS01 challenge records.
-                              properties:
-                                clientID:
-                                  description: if both this and ClientSecret are left
-                                    unset MSI will be used
-                                  type: string
-                                clientSecretSecretRef:
-                                  description: if both this and ClientID are left
-                                    unset MSI will be used
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                environment:
-                                  description: name of the Azure environment (default
-                                    AzurePublicCloud)
-                                  enum:
-                                  - AzurePublicCloud
-                                  - AzureChinaCloud
-                                  - AzureGermanCloud
-                                  - AzureUSGovernmentCloud
-                                  type: string
-                                hostedZoneName:
-                                  description: name of the DNS zone that should be
-                                    used
-                                  type: string
-                                managedIdentity:
-                                  description: managed identity configuration, can
-                                    not be used at the same time as clientID, clientSecretSecretRef
-                                    or tenantID
-                                  properties:
-                                    clientID:
-                                      description: client ID of the managed identity,
-                                        can not be used at the same time as resourceID
-                                      type: string
-                                    resourceID:
-                                      description: resource ID of the managed identity,
-                                        can not be used at the same time as clientID
-                                      type: string
-                                  type: object
-                                resourceGroupName:
-                                  description: resource group the DNS zone is located
-                                    in
-                                  type: string
-                                subscriptionID:
-                                  description: ID of the Azure subscription
-                                  type: string
-                                tenantID:
-                                  description: when specifying ClientID and ClientSecret
-                                    then this field is also needed
-                                  type: string
-                              required:
-                              - resourceGroupName
-                              - subscriptionID
-                              type: object
-                            cloudDNS:
-                              description: Use the Google Cloud DNS API to manage
-                                DNS01 challenge records.
-                              properties:
-                                hostedZoneName:
-                                  description: HostedZoneName is an optional field
-                                    that tells cert-manager in which Cloud DNS zone
-                                    the challenge record has to be created. If left
-                                    empty cert-manager will automatically choose a
-                                    zone.
-                                  type: string
-                                project:
-                                  type: string
-                                serviceAccountSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - project
-                              type: object
-                            cloudflare:
-                              description: Use the Cloudflare API to manage DNS01
-                                challenge records.
-                              properties:
-                                apiKeySecretRef:
-                                  description: 'API key to use to authenticate with
-                                    Cloudflare. Note: using an API token to authenticate
-                                    is now the recommended method as it allows greater
-                                    control of permissions.'
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                apiTokenSecretRef:
-                                  description: API token used to authenticate with
-                                    Cloudflare.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                email:
-                                  description: Email of the account, only required
-                                    when using API key based authentication.
-                                  type: string
-                              type: object
-                            cnameStrategy:
-                              description: CNAMEStrategy configures how the DNS01
-                                provider should handle CNAME records when found in
-                                DNS zones.
-                              enum:
-                              - None
-                              - Follow
-                              type: string
-                            digitalocean:
-                              description: Use the DigitalOcean DNS API to manage
-                                DNS01 challenge records.
-                              properties:
-                                tokenSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - tokenSecretRef
-                              type: object
-                            rfc2136:
-                              description: Use RFC2136 ("Dynamic Updates in the Domain
-                                Name System") (https://datatracker.ietf.org/doc/rfc2136/)
-                                to manage DNS01 challenge records.
-                              properties:
-                                nameserver:
-                                  description: The IP address or hostname of an authoritative
-                                    DNS server supporting RFC2136 in the form host:port.
-                                    If the host is an IPv6 address it must be enclosed
-                                    in square brackets (e.g [2001:db8::1]) ; port
-                                    is optional. This field is required.
-                                  type: string
-                                tsigAlgorithm:
-                                  description: 'The TSIG Algorithm configured in the
-                                    DNS supporting RFC2136. Used only when ``tsigSecretSecretRef``
-                                    and ``tsigKeyName`` are defined. Supported values
-                                    are (case-insensitive): ``HMACMD5`` (default),
-                                    ``HMACSHA1``, ``HMACSHA256`` or ``HMACSHA512``.'
-                                  type: string
-                                tsigKeyName:
-                                  description: The TSIG Key name configured in the
-                                    DNS. If ``tsigSecretSecretRef`` is defined, this
-                                    field is required.
-                                  type: string
-                                tsigSecretSecretRef:
-                                  description: The name of the secret containing the
-                                    TSIG value. If ``tsigKeyName`` is defined, this
-                                    field is required.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - nameserver
-                              type: object
-                            route53:
-                              description: Use the AWS Route53 API to manage DNS01
-                                challenge records.
-                              properties:
-                                accessKeyID:
-                                  description: 'The AccessKeyID is used for authentication.
-                                    Cannot be set when SecretAccessKeyID is set. If
-                                    neither the Access Key nor Key ID are set, we
-                                    fall-back to using env vars, shared credentials
-                                    file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                                  type: string
-                                accessKeyIDSecretRef:
-                                  description: 'The SecretAccessKey is used for authentication.
-                                    If set, pull the AWS access key ID from a key
-                                    within a Kubernetes Secret. Cannot be set when
-                                    AccessKeyID is set. If neither the Access Key
-                                    nor Key ID are set, we fall-back to using env
-                                    vars, shared credentials file or AWS Instance
-                                    metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                hostedZoneID:
-                                  description: If set, the provider will manage only
-                                    this zone in Route53 and will not do an lookup
-                                    using the route53:ListHostedZonesByName api call.
-                                  type: string
-                                region:
-                                  description: Always set the region when using AccessKeyID
-                                    and SecretAccessKey
-                                  type: string
-                                role:
-                                  description: Role is a Role ARN which the Route53
-                                    provider will assume using either the explicit
-                                    credentials AccessKeyID/SecretAccessKey or the
-                                    inferred credentials from environment variables,
-                                    shared credentials file or AWS Instance metadata
-                                  type: string
-                                secretAccessKeySecretRef:
-                                  description: 'The SecretAccessKey is used for authentication.
-                                    If neither the Access Key nor Key ID are set,
-                                    we fall-back to using env vars, shared credentials
-                                    file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - region
-                              type: object
-                            webhook:
-                              description: Configure an external webhook based DNS01
-                                challenge solver to manage DNS01 challenge records.
-                              properties:
-                                config:
-                                  description: Additional configuration that should
-                                    be passed to the webhook apiserver when challenges
-                                    are processed. This can contain arbitrary JSON
-                                    data. Secret values should not be specified in
-                                    this stanza. If secret values are needed (e.g.
-                                    credentials for a DNS service), you should use
-                                    a SecretKeySelector to reference a Secret resource.
-                                    For details on the schema of this field, consult
-                                    the webhook provider implementation's documentation.
-                                  x-kubernetes-preserve-unknown-fields: true
-                                groupName:
-                                  description: The API group name that should be used
-                                    when POSTing ChallengePayload resources to the
-                                    webhook apiserver. This should be the same as
-                                    the GroupName specified in the webhook provider
-                                    implementation.
-                                  type: string
-                                solverName:
-                                  description: The name of the solver to use, as defined
-                                    in the webhook provider implementation. This will
-                                    typically be the name of the provider, e.g. 'cloudflare'.
-                                  type: string
-                              required:
-                              - groupName
-                              - solverName
-                              type: object
-                          type: object
-                        http01:
-                          description: Configures cert-manager to attempt to complete
-                            authorizations by performing the HTTP01 challenge flow.
-                            It is not possible to obtain certificates for wildcard
-                            domain names (e.g. `*.example.com`) using the HTTP01 challenge
-                            mechanism.
-                          properties:
-                            gatewayHTTPRoute:
-                              description: The Gateway API is a sig-network community
-                                API that models service networking in Kubernetes (https://gateway-api.sigs.k8s.io/).
-                                The Gateway solver will create HTTPRoutes with the
-                                specified labels in the same namespace as the challenge.
-                                This solver is experimental, and fields / behaviour
-                                may change in the future.
-                              properties:
-                                labels:
-                                  additionalProperties:
-                                    type: string
-                                  description: Custom labels that will be applied
-                                    to HTTPRoutes created by cert-manager while solving
-                                    HTTP-01 challenges.
-                                  type: object
-                                parentRefs:
-                                  description: 'When solving an HTTP-01 challenge,
-                                    cert-manager creates an HTTPRoute. cert-manager
-                                    needs to know which parentRefs should be used
-                                    when creating the HTTPRoute. Usually, the parentRef
-                                    references a Gateway. See: https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways'
-                                  items:
-                                    description: "ParentReference identifies an API
-                                      object (usually a Gateway) that can be considered
-                                      a parent of this resource (usually a route).
-                                      The only kind of parent resource with \"Core\"
-                                      support is Gateway. This API may be extended
-                                      in the future to support additional kinds of
-                                      parent resources, such as HTTPRoute. \n The
-                                      API object must be valid in the cluster; the
-                                      Group and Kind must be registered in the cluster
-                                      for this reference to be valid."
-                                    properties:
-                                      group:
-                                        default: gateway.networking.k8s.io
-                                        description: "Group is the group of the referent.
-                                          When unspecified, \"gateway.networking.k8s.io\"
-                                          is inferred. To set the core API group (such
-                                          as for a \"Service\" kind referent), Group
-                                          must be explicitly set to \"\" (empty string).
-                                          \n Support: Core"
-                                        maxLength: 253
-                                        pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
-                                        type: string
-                                      kind:
-                                        default: Gateway
-                                        description: "Kind is kind of the referent.
-                                          \n Support: Core (Gateway) \n Support: Implementation-specific
-                                          (Other Resources)"
-                                        maxLength: 63
-                                        minLength: 1
-                                        pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
-                                        type: string
-                                      name:
-                                        description: "Name is the name of the referent.
-                                          \n Support: Core"
-                                        maxLength: 253
-                                        minLength: 1
-                                        type: string
-                                      namespace:
-                                        description: "Namespace is the namespace of
-                                          the referent. When unspecified, this refers
-                                          to the local namespace of the Route. \n
-                                          Note that there are specific rules for ParentRefs
-                                          which cross namespace boundaries. Cross-namespace
-                                          references are only valid if they are explicitly
-                                          allowed by something in the namespace they
-                                          are referring to. For example: Gateway has
-                                          the AllowedRoutes field, and ReferenceGrant
-                                          provides a generic way to enable any other
-                                          kind of cross-namespace reference. \n Support:
-                                          Core"
-                                        maxLength: 63
-                                        minLength: 1
-                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
-                                        type: string
-                                      port:
-                                        description: "Port is the network port this
-                                          Route targets. It can be interpreted differently
-                                          based on the type of parent resource. \n
-                                          When the parent resource is a Gateway, this
-                                          targets all listeners listening on the specified
-                                          port that also support this kind of Route(and
-                                          select this Route). It's not recommended
-                                          to set `Port` unless the networking behaviors
-                                          specified in a Route must apply to a specific
-                                          port as opposed to a listener(s) whose port(s)
-                                          may be changed. When both Port and SectionName
-                                          are specified, the name and port of the
-                                          selected listener must match both specified
-                                          values. \n Implementations MAY choose to
-                                          support other parent resources. Implementations
-                                          supporting other types of parent resources
-                                          MUST clearly document how/if Port is interpreted.
-                                          \n For the purpose of status, an attachment
-                                          is considered successful as long as the
-                                          parent resource accepts it partially. For
-                                          example, Gateway listeners can restrict
-                                          which Routes can attach to them by Route
-                                          kind, namespace, or hostname. If 1 of 2
-                                          Gateway listeners accept attachment from
-                                          the referencing Route, the Route MUST be
-                                          considered successfully attached. If no
-                                          Gateway listeners accept attachment from
-                                          this Route, the Route MUST be considered
-                                          detached from the Gateway. \n Support: Extended
-                                          \n <gateway:experimental>"
-                                        format: int32
-                                        maximum: 65535
-                                        minimum: 1
-                                        type: integer
-                                      sectionName:
-                                        description: "SectionName is the name of a
-                                          section within the target resource. In the
-                                          following resources, SectionName is interpreted
-                                          as the following: \n * Gateway: Listener
-                                          Name. When both Port (experimental) and
-                                          SectionName are specified, the name and
-                                          port of the selected listener must match
-                                          both specified values. \n Implementations
-                                          MAY choose to support attaching Routes to
-                                          other resources. If that is the case, they
-                                          MUST clearly document how SectionName is
-                                          interpreted. \n When unspecified (empty
-                                          string), this will reference the entire
-                                          resource. For the purpose of status, an
-                                          attachment is considered successful if at
-                                          least one section in the parent resource
-                                          accepts it. For example, Gateway listeners
-                                          can restrict which Routes can attach to
-                                          them by Route kind, namespace, or hostname.
-                                          If 1 of 2 Gateway listeners accept attachment
-                                          from the referencing Route, the Route MUST
-                                          be considered successfully attached. If
-                                          no Gateway listeners accept attachment from
-                                          this Route, the Route MUST be considered
-                                          detached from the Gateway. \n Support: Core"
-                                        maxLength: 253
-                                        minLength: 1
-                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
-                                        type: string
-                                    required:
-                                    - name
-                                    type: object
-                                  type: array
-                                serviceType:
-                                  description: Optional service type for Kubernetes
-                                    solver service. Supported values are NodePort
-                                    or ClusterIP. If unset, defaults to NodePort.
-                                  type: string
-                              type: object
-                            ingress:
-                              description: The ingress based HTTP01 challenge solver
-                                will solve challenges by creating or modifying Ingress
-                                resources in order to route requests for '/.well-known/acme-challenge/XYZ'
-                                to 'challenge solver' pods that are provisioned by
-                                cert-manager for each Challenge to be completed.
-                              properties:
-                                class:
-                                  description: This field configures the annotation
-                                    `kubernetes.io/ingress.class` when creating Ingress
-                                    resources to solve ACME challenges that use this
-                                    challenge solver. Only one of `class`, `name`
-                                    or `ingressClassName` may be specified.
-                                  type: string
-                                ingressClassName:
-                                  description: This field configures the field `ingressClassName`
-                                    on the created Ingress resources used to solve
-                                    ACME challenges that use this challenge solver.
-                                    This is the recommended way of configuring the
-                                    ingress class. Only one of `class`, `name` or
-                                    `ingressClassName` may be specified.
-                                  type: string
-                                ingressTemplate:
-                                  description: Optional ingress template used to configure
-                                    the ACME challenge solver ingress used for HTTP01
-                                    challenges.
-                                  properties:
-                                    metadata:
-                                      description: ObjectMeta overrides for the ingress
-                                        used to solve HTTP01 challenges. Only the
-                                        'labels' and 'annotations' fields may be set.
-                                        If labels or annotations overlap with in-built
-                                        values, the values here will override the
-                                        in-built values.
-                                      properties:
-                                        annotations:
-                                          additionalProperties:
-                                            type: string
-                                          description: Annotations that should be
-                                            added to the created ACME HTTP01 solver
-                                            ingress.
-                                          type: object
-                                        labels:
-                                          additionalProperties:
-                                            type: string
-                                          description: Labels that should be added
-                                            to the created ACME HTTP01 solver ingress.
-                                          type: object
-                                      type: object
-                                  type: object
-                                name:
-                                  description: The name of the ingress resource that
-                                    should have ACME challenge solving routes inserted
-                                    into it in order to solve HTTP01 challenges. This
-                                    is typically used in conjunction with ingress
-                                    controllers like ingress-gce, which maintains
-                                    a 1:1 mapping between external IPs and ingress
-                                    resources. Only one of `class`, `name` or `ingressClassName`
-                                    may be specified.
-                                  type: string
-                                podTemplate:
-                                  description: Optional pod template used to configure
-                                    the ACME challenge solver pods used for HTTP01
-                                    challenges.
-                                  properties:
-                                    metadata:
-                                      description: ObjectMeta overrides for the pod
-                                        used to solve HTTP01 challenges. Only the
-                                        'labels' and 'annotations' fields may be set.
-                                        If labels or annotations overlap with in-built
-                                        values, the values here will override the
-                                        in-built values.
-                                      properties:
-                                        annotations:
-                                          additionalProperties:
-                                            type: string
-                                          description: Annotations that should be
-                                            added to the create ACME HTTP01 solver
-                                            pods.
-                                          type: object
-                                        labels:
-                                          additionalProperties:
-                                            type: string
-                                          description: Labels that should be added
-                                            to the created ACME HTTP01 solver pods.
-                                          type: object
-                                      type: object
-                                    spec:
-                                      description: PodSpec defines overrides for the
-                                        HTTP01 challenge solver pod. Check ACMEChallengeSolverHTTP01IngressPodSpec
-                                        to find out currently supported fields. All
-                                        other fields will be ignored.
-                                      properties:
-                                        affinity:
-                                          description: If specified, the pod's scheduling
-                                            constraints
-                                          properties:
-                                            nodeAffinity:
-                                              description: Describes node affinity
-                                                scheduling rules for the pod.
-                                              properties:
-                                                preferredDuringSchedulingIgnoredDuringExecution:
-                                                  description: The scheduler will
-                                                    prefer to schedule pods to nodes
-                                                    that satisfy the affinity expressions
-                                                    specified by this field, but it
-                                                    may choose a node that violates
-                                                    one or more of the expressions.
-                                                    The node that is most preferred
-                                                    is the one with the greatest sum
-                                                    of weights, i.e. for each node
-                                                    that meets all of the scheduling
-                                                    requirements (resource request,
-                                                    requiredDuringScheduling affinity
-                                                    expressions, etc.), compute a
-                                                    sum by iterating through the elements
-                                                    of this field and adding "weight"
-                                                    to the sum if the node matches
-                                                    the corresponding matchExpressions;
-                                                    the node(s) with the highest sum
-                                                    are the most preferred.
-                                                  items:
-                                                    description: An empty preferred
-                                                      scheduling term matches all
-                                                      objects with implicit weight
-                                                      0 (i.e. it's a no-op). A null
-                                                      preferred scheduling term matches
-                                                      no objects (i.e. is also a no-op).
-                                                    properties:
-                                                      preference:
-                                                        description: A node selector
-                                                          term, associated with the
-                                                          corresponding weight.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's labels.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchFields:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's fields.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      weight:
-                                                        description: Weight associated
-                                                          with matching the corresponding
-                                                          nodeSelectorTerm, in the
-                                                          range 1-100.
-                                                        format: int32
-                                                        type: integer
-                                                    required:
-                                                    - preference
-                                                    - weight
-                                                    type: object
-                                                  type: array
-                                                requiredDuringSchedulingIgnoredDuringExecution:
-                                                  description: If the affinity requirements
-                                                    specified by this field are not
-                                                    met at scheduling time, the pod
-                                                    will not be scheduled onto the
-                                                    node. If the affinity requirements
-                                                    specified by this field cease
-                                                    to be met at some point during
-                                                    pod execution (e.g. due to an
-                                                    update), the system may or may
-                                                    not try to eventually evict the
-                                                    pod from its node.
-                                                  properties:
-                                                    nodeSelectorTerms:
-                                                      description: Required. A list
-                                                        of node selector terms. The
-                                                        terms are ORed.
-                                                      items:
-                                                        description: A null or empty
-                                                          node selector term matches
-                                                          no objects. The requirements
-                                                          of them are ANDed. The TopologySelectorTerm
-                                                          type implements a subset
-                                                          of the NodeSelectorTerm.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's labels.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchFields:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's fields.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      type: array
-                                                  required:
-                                                  - nodeSelectorTerms
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                              type: object
-                                            podAffinity:
-                                              description: Describes pod affinity
-                                                scheduling rules (e.g. co-locate this
-                                                pod in the same node, zone, etc. as
-                                                some other pod(s)).
-                                              properties:
-                                                preferredDuringSchedulingIgnoredDuringExecution:
-                                                  description: The scheduler will
-                                                    prefer to schedule pods to nodes
-                                                    that satisfy the affinity expressions
-                                                    specified by this field, but it
-                                                    may choose a node that violates
-                                                    one or more of the expressions.
-                                                    The node that is most preferred
-                                                    is the one with the greatest sum
-                                                    of weights, i.e. for each node
-                                                    that meets all of the scheduling
-                                                    requirements (resource request,
-                                                    requiredDuringScheduling affinity
-                                                    expressions, etc.), compute a
-                                                    sum by iterating through the elements
-                                                    of this field and adding "weight"
-                                                    to the sum if the node has pods
-                                                    which matches the corresponding
-                                                    podAffinityTerm; the node(s) with
-                                                    the highest sum are the most preferred.
-                                                  items:
-                                                    description: The weights of all
-                                                      of the matched WeightedPodAffinityTerm
-                                                      fields are added per-node to
-                                                      find the most preferred node(s)
-                                                    properties:
-                                                      podAffinityTerm:
-                                                        description: Required. A pod
-                                                          affinity term, associated
-                                                          with the corresponding weight.
-                                                        properties:
-                                                          labelSelector:
-                                                            description: A label query
-                                                              over a set of resources,
-                                                              in this case pods.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaceSelector:
-                                                            description: A label query
-                                                              over the set of namespaces
-                                                              that the term applies
-                                                              to. The term is applied
-                                                              to the union of the
-                                                              namespaces selected
-                                                              by this field and the
-                                                              ones listed in the namespaces
-                                                              field. null selector
-                                                              and null or empty namespaces
-                                                              list means "this pod's
-                                                              namespace". An empty
-                                                              selector ({}) matches
-                                                              all namespaces.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaces:
-                                                            description: namespaces
-                                                              specifies a static list
-                                                              of namespace names that
-                                                              the term applies to.
-                                                              The term is applied
-                                                              to the union of the
-                                                              namespaces listed in
-                                                              this field and the ones
-                                                              selected by namespaceSelector.
-                                                              null or empty namespaces
-                                                              list and null namespaceSelector
-                                                              means "this pod's namespace".
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                          topologyKey:
-                                                            description: This pod
-                                                              should be co-located
-                                                              (affinity) or not co-located
-                                                              (anti-affinity) with
-                                                              the pods matching the
-                                                              labelSelector in the
-                                                              specified namespaces,
-                                                              where co-located is
-                                                              defined as running on
-                                                              a node whose value of
-                                                              the label with key topologyKey
-                                                              matches that of any
-                                                              node on which any of
-                                                              the selected pods is
-                                                              running. Empty topologyKey
-                                                              is not allowed.
-                                                            type: string
-                                                        required:
-                                                        - topologyKey
-                                                        type: object
-                                                      weight:
-                                                        description: weight associated
-                                                          with matching the corresponding
-                                                          podAffinityTerm, in the
-                                                          range 1-100.
-                                                        format: int32
-                                                        type: integer
-                                                    required:
-                                                    - podAffinityTerm
-                                                    - weight
-                                                    type: object
-                                                  type: array
-                                                requiredDuringSchedulingIgnoredDuringExecution:
-                                                  description: If the affinity requirements
-                                                    specified by this field are not
-                                                    met at scheduling time, the pod
-                                                    will not be scheduled onto the
-                                                    node. If the affinity requirements
-                                                    specified by this field cease
-                                                    to be met at some point during
-                                                    pod execution (e.g. due to a pod
-                                                    label update), the system may
-                                                    or may not try to eventually evict
-                                                    the pod from its node. When there
-                                                    are multiple elements, the lists
-                                                    of nodes corresponding to each
-                                                    podAffinityTerm are intersected,
-                                                    i.e. all terms must be satisfied.
-                                                  items:
-                                                    description: Defines a set of
-                                                      pods (namely those matching
-                                                      the labelSelector relative to
-                                                      the given namespace(s)) that
-                                                      this pod should be co-located
-                                                      (affinity) or not co-located
-                                                      (anti-affinity) with, where
-                                                      co-located is defined as running
-                                                      on a node whose value of the
-                                                      label with key <topologyKey>
-                                                      matches that of any node on
-                                                      which a pod of the set of pods
-                                                      is running
-                                                    properties:
-                                                      labelSelector:
-                                                        description: A label query
-                                                          over a set of resources,
-                                                          in this case pods.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaceSelector:
-                                                        description: A label query
-                                                          over the set of namespaces
-                                                          that the term applies to.
-                                                          The term is applied to the
-                                                          union of the namespaces
-                                                          selected by this field and
-                                                          the ones listed in the namespaces
-                                                          field. null selector and
-                                                          null or empty namespaces
-                                                          list means "this pod's namespace".
-                                                          An empty selector ({}) matches
-                                                          all namespaces.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaces:
-                                                        description: namespaces specifies
-                                                          a static list of namespace
-                                                          names that the term applies
-                                                          to. The term is applied
-                                                          to the union of the namespaces
-                                                          listed in this field and
-                                                          the ones selected by namespaceSelector.
-                                                          null or empty namespaces
-                                                          list and null namespaceSelector
-                                                          means "this pod's namespace".
-                                                        items:
-                                                          type: string
-                                                        type: array
-                                                      topologyKey:
-                                                        description: This pod should
-                                                          be co-located (affinity)
-                                                          or not co-located (anti-affinity)
-                                                          with the pods matching the
-                                                          labelSelector in the specified
-                                                          namespaces, where co-located
-                                                          is defined as running on
-                                                          a node whose value of the
-                                                          label with key topologyKey
-                                                          matches that of any node
-                                                          on which any of the selected
-                                                          pods is running. Empty topologyKey
-                                                          is not allowed.
-                                                        type: string
-                                                    required:
-                                                    - topologyKey
-                                                    type: object
-                                                  type: array
-                                              type: object
-                                            podAntiAffinity:
-                                              description: Describes pod anti-affinity
-                                                scheduling rules (e.g. avoid putting
-                                                this pod in the same node, zone, etc.
-                                                as some other pod(s)).
-                                              properties:
-                                                preferredDuringSchedulingIgnoredDuringExecution:
-                                                  description: The scheduler will
-                                                    prefer to schedule pods to nodes
-                                                    that satisfy the anti-affinity
-                                                    expressions specified by this
-                                                    field, but it may choose a node
-                                                    that violates one or more of the
-                                                    expressions. The node that is
-                                                    most preferred is the one with
-                                                    the greatest sum of weights, i.e.
-                                                    for each node that meets all of
-                                                    the scheduling requirements (resource
-                                                    request, requiredDuringScheduling
-                                                    anti-affinity expressions, etc.),
-                                                    compute a sum by iterating through
-                                                    the elements of this field and
-                                                    adding "weight" to the sum if
-                                                    the node has pods which matches
-                                                    the corresponding podAffinityTerm;
-                                                    the node(s) with the highest sum
-                                                    are the most preferred.
-                                                  items:
-                                                    description: The weights of all
-                                                      of the matched WeightedPodAffinityTerm
-                                                      fields are added per-node to
-                                                      find the most preferred node(s)
-                                                    properties:
-                                                      podAffinityTerm:
-                                                        description: Required. A pod
-                                                          affinity term, associated
-                                                          with the corresponding weight.
-                                                        properties:
-                                                          labelSelector:
-                                                            description: A label query
-                                                              over a set of resources,
-                                                              in this case pods.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaceSelector:
-                                                            description: A label query
-                                                              over the set of namespaces
-                                                              that the term applies
-                                                              to. The term is applied
-                                                              to the union of the
-                                                              namespaces selected
-                                                              by this field and the
-                                                              ones listed in the namespaces
-                                                              field. null selector
-                                                              and null or empty namespaces
-                                                              list means "this pod's
-                                                              namespace". An empty
-                                                              selector ({}) matches
-                                                              all namespaces.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaces:
-                                                            description: namespaces
-                                                              specifies a static list
-                                                              of namespace names that
-                                                              the term applies to.
-                                                              The term is applied
-                                                              to the union of the
-                                                              namespaces listed in
-                                                              this field and the ones
-                                                              selected by namespaceSelector.
-                                                              null or empty namespaces
-                                                              list and null namespaceSelector
-                                                              means "this pod's namespace".
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                          topologyKey:
-                                                            description: This pod
-                                                              should be co-located
-                                                              (affinity) or not co-located
-                                                              (anti-affinity) with
-                                                              the pods matching the
-                                                              labelSelector in the
-                                                              specified namespaces,
-                                                              where co-located is
-                                                              defined as running on
-                                                              a node whose value of
-                                                              the label with key topologyKey
-                                                              matches that of any
-                                                              node on which any of
-                                                              the selected pods is
-                                                              running. Empty topologyKey
-                                                              is not allowed.
-                                                            type: string
-                                                        required:
-                                                        - topologyKey
-                                                        type: object
-                                                      weight:
-                                                        description: weight associated
-                                                          with matching the corresponding
-                                                          podAffinityTerm, in the
-                                                          range 1-100.
-                                                        format: int32
-                                                        type: integer
-                                                    required:
-                                                    - podAffinityTerm
-                                                    - weight
-                                                    type: object
-                                                  type: array
-                                                requiredDuringSchedulingIgnoredDuringExecution:
-                                                  description: If the anti-affinity
-                                                    requirements specified by this
-                                                    field are not met at scheduling
-                                                    time, the pod will not be scheduled
-                                                    onto the node. If the anti-affinity
-                                                    requirements specified by this
-                                                    field cease to be met at some
-                                                    point during pod execution (e.g.
-                                                    due to a pod label update), the
-                                                    system may or may not try to eventually
-                                                    evict the pod from its node. When
-                                                    there are multiple elements, the
-                                                    lists of nodes corresponding to
-                                                    each podAffinityTerm are intersected,
-                                                    i.e. all terms must be satisfied.
-                                                  items:
-                                                    description: Defines a set of
-                                                      pods (namely those matching
-                                                      the labelSelector relative to
-                                                      the given namespace(s)) that
-                                                      this pod should be co-located
-                                                      (affinity) or not co-located
-                                                      (anti-affinity) with, where
-                                                      co-located is defined as running
-                                                      on a node whose value of the
-                                                      label with key <topologyKey>
-                                                      matches that of any node on
-                                                      which a pod of the set of pods
-                                                      is running
-                                                    properties:
-                                                      labelSelector:
-                                                        description: A label query
-                                                          over a set of resources,
-                                                          in this case pods.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaceSelector:
-                                                        description: A label query
-                                                          over the set of namespaces
-                                                          that the term applies to.
-                                                          The term is applied to the
-                                                          union of the namespaces
-                                                          selected by this field and
-                                                          the ones listed in the namespaces
-                                                          field. null selector and
-                                                          null or empty namespaces
-                                                          list means "this pod's namespace".
-                                                          An empty selector ({}) matches
-                                                          all namespaces.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaces:
-                                                        description: namespaces specifies
-                                                          a static list of namespace
-                                                          names that the term applies
-                                                          to. The term is applied
-                                                          to the union of the namespaces
-                                                          listed in this field and
-                                                          the ones selected by namespaceSelector.
-                                                          null or empty namespaces
-                                                          list and null namespaceSelector
-                                                          means "this pod's namespace".
-                                                        items:
-                                                          type: string
-                                                        type: array
-                                                      topologyKey:
-                                                        description: This pod should
-                                                          be co-located (affinity)
-                                                          or not co-located (anti-affinity)
-                                                          with the pods matching the
-                                                          labelSelector in the specified
-                                                          namespaces, where co-located
-                                                          is defined as running on
-                                                          a node whose value of the
-                                                          label with key topologyKey
-                                                          matches that of any node
-                                                          on which any of the selected
-                                                          pods is running. Empty topologyKey
-                                                          is not allowed.
-                                                        type: string
-                                                    required:
-                                                    - topologyKey
-                                                    type: object
-                                                  type: array
-                                              type: object
-                                          type: object
-                                        imagePullSecrets:
-                                          description: If specified, the pod's imagePullSecrets
-                                          items:
-                                            description: LocalObjectReference contains
-                                              enough information to let you locate
-                                              the referenced object inside the same
-                                              namespace.
-                                            properties:
-                                              name:
-                                                description: 'Name of the referent.
-                                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                                  TODO: Add other useful fields. apiVersion,
-                                                  kind, uid?'
-                                                type: string
-                                            type: object
-                                            x-kubernetes-map-type: atomic
-                                          type: array
-                                        nodeSelector:
-                                          additionalProperties:
-                                            type: string
-                                          description: 'NodeSelector is a selector
-                                            which must be true for the pod to fit
-                                            on a node. Selector which must match a
-                                            node''s labels for the pod to be scheduled
-                                            on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
-                                          type: object
-                                        priorityClassName:
-                                          description: If specified, the pod's priorityClassName.
-                                          type: string
-                                        serviceAccountName:
-                                          description: If specified, the pod's service
-                                            account
-                                          type: string
-                                        tolerations:
-                                          description: If specified, the pod's tolerations.
-                                          items:
-                                            description: The pod this Toleration is
-                                              attached to tolerates any taint that
-                                              matches the triple <key,value,effect>
-                                              using the matching operator <operator>.
-                                            properties:
-                                              effect:
-                                                description: Effect indicates the
-                                                  taint effect to match. Empty means
-                                                  match all taint effects. When specified,
-                                                  allowed values are NoSchedule, PreferNoSchedule
-                                                  and NoExecute.
-                                                type: string
-                                              key:
-                                                description: Key is the taint key
-                                                  that the toleration applies to.
-                                                  Empty means match all taint keys.
-                                                  If the key is empty, operator must
-                                                  be Exists; this combination means
-                                                  to match all values and all keys.
-                                                type: string
-                                              operator:
-                                                description: Operator represents a
-                                                  key's relationship to the value.
-                                                  Valid operators are Exists and Equal.
-                                                  Defaults to Equal. Exists is equivalent
-                                                  to wildcard for value, so that a
-                                                  pod can tolerate all taints of a
-                                                  particular category.
-                                                type: string
-                                              tolerationSeconds:
-                                                description: TolerationSeconds represents
-                                                  the period of time the toleration
-                                                  (which must be of effect NoExecute,
-                                                  otherwise this field is ignored)
-                                                  tolerates the taint. By default,
-                                                  it is not set, which means tolerate
-                                                  the taint forever (do not evict).
-                                                  Zero and negative values will be
-                                                  treated as 0 (evict immediately)
-                                                  by the system.
-                                                format: int64
-                                                type: integer
-                                              value:
-                                                description: Value is the taint value
-                                                  the toleration matches to. If the
-                                                  operator is Exists, the value should
-                                                  be empty, otherwise just a regular
-                                                  string.
-                                                type: string
-                                            type: object
-                                          type: array
-                                      type: object
-                                  type: object
-                                serviceType:
-                                  description: Optional service type for Kubernetes
-                                    solver service. Supported values are NodePort
-                                    or ClusterIP. If unset, defaults to NodePort.
-                                  type: string
-                              type: object
-                          type: object
-                        selector:
-                          description: Selector selects a set of DNSNames on the Certificate
-                            resource that should be solved using this challenge solver.
-                            If not specified, the solver will be treated as the 'default'
-                            solver with the lowest priority, i.e. if any other solver
-                            has a more specific match, it will be used instead.
-                          properties:
-                            dnsNames:
-                              description: List of DNSNames that this solver will
-                                be used to solve. If specified and a match is found,
-                                a dnsNames selector will take precedence over a dnsZones
-                                selector. If multiple solvers match with the same
-                                dnsNames value, the solver with the most matching
-                                labels in matchLabels will be selected. If neither
-                                has more matches, the solver defined earlier in the
-                                list will be selected.
-                              items:
-                                type: string
-                              type: array
-                            dnsZones:
-                              description: List of DNSZones that this solver will
-                                be used to solve. The most specific DNS zone match
-                                specified here will take precedence over other DNS
-                                zone matches, so a solver specifying sys.example.com
-                                will be selected over one specifying example.com for
-                                the domain www.sys.example.com. If multiple solvers
-                                match with the same dnsZones value, the solver with
-                                the most matching labels in matchLabels will be selected.
-                                If neither has more matches, the solver defined earlier
-                                in the list will be selected.
-                              items:
-                                type: string
-                              type: array
-                            matchLabels:
-                              additionalProperties:
-                                type: string
-                              description: A label selector that is used to refine
-                                the set of certificate's that this challenge solver
-                                will apply to.
-                              type: object
-                          type: object
-                      type: object
-                    type: array
-                required:
-                - privateKeySecretRef
-                - server
-                type: object
-              ca:
-                description: CA configures this issuer to sign certificates using
-                  a signing CA keypair stored in a Secret resource. This is used to
-                  build internal PKIs that are managed by cert-manager.
-                properties:
-                  crlDistributionPoints:
-                    description: The CRL distribution points is an X.509 v3 certificate
-                      extension which identifies the location of the CRL from which
-                      the revocation of this certificate can be checked. If not set,
-                      certificates will be issued without distribution points set.
-                    items:
-                      type: string
-                    type: array
-                  ocspServers:
-                    description: The OCSP server list is an X.509 v3 extension that
-                      defines a list of URLs of OCSP responders. The OCSP responders
-                      can be queried for the revocation status of an issued certificate.
-                      If not set, the certificate will be issued with no OCSP servers
-                      set. For example, an OCSP server URL could be "http://ocsp.int-x3.letsencrypt.org".
-                    items:
-                      type: string
-                    type: array
-                  secretName:
-                    description: SecretName is the name of the secret used to sign
-                      Certificates issued by this Issuer.
-                    type: string
-                required:
-                - secretName
-                type: object
-              selfSigned:
-                description: SelfSigned configures this issuer to 'self sign' certificates
-                  using the private key used to create the CertificateRequest object.
-                properties:
-                  crlDistributionPoints:
-                    description: The CRL distribution points is an X.509 v3 certificate
-                      extension which identifies the location of the CRL from which
-                      the revocation of this certificate can be checked. If not set
-                      certificate will be issued without CDP. Values are strings.
-                    items:
-                      type: string
-                    type: array
-                type: object
-              vault:
-                description: Vault configures this issuer to sign certificates using
-                  a HashiCorp Vault PKI backend.
-                properties:
-                  auth:
-                    description: Auth configures how cert-manager authenticates with
-                      the Vault server.
-                    properties:
-                      appRole:
-                        description: AppRole authenticates with Vault using the App
-                          Role auth mechanism, with the role and secret stored in
-                          a Kubernetes Secret resource.
-                        properties:
-                          path:
-                            description: 'Path where the App Role authentication backend
-                              is mounted in Vault, e.g: "approle"'
-                            type: string
-                          roleId:
-                            description: RoleID configured in the App Role authentication
-                              backend when setting up the authentication backend in
-                              Vault.
-                            type: string
-                          secretRef:
-                            description: Reference to a key in a Secret that contains
-                              the App Role secret used to authenticate with Vault.
-                              The `key` field must be specified and denotes which
-                              entry within the Secret resource is used as the app
-                              role secret.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - path
-                        - roleId
-                        - secretRef
-                        type: object
-                      kubernetes:
-                        description: Kubernetes authenticates with Vault by passing
-                          the ServiceAccount token stored in the named Secret resource
-                          to the Vault server.
-                        properties:
-                          mountPath:
-                            description: The Vault mountPath here is the mount path
-                              to use when authenticating with Vault. For example,
-                              setting a value to `/v1/auth/foo`, will use the path
-                              `/v1/auth/foo/login` to authenticate with Vault. If
-                              unspecified, the default value "/v1/auth/kubernetes"
-                              will be used.
-                            type: string
-                          role:
-                            description: A required field containing the Vault Role
-                              to assume. A Role binds a Kubernetes ServiceAccount
-                              with a set of Vault policies.
-                            type: string
-                          secretRef:
-                            description: The required Secret field containing a Kubernetes
-                              ServiceAccount JWT used for authenticating with Vault.
-                              Use of 'ambient credentials' is not supported.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          serviceAccountRef:
-                            description: A reference to a service account that will
-                              be used to request a bound token (also known as "projected
-                              token"). Compared to using "secretRef", using this field
-                              means that you don't rely on statically bound tokens.
-                              To use this field, you must configure an RBAC rule to
-                              let cert-manager request a token.
-                            properties:
-                              name:
-                                description: Name of the ServiceAccount used to request
-                                  a token.
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - role
-                        type: object
-                      tokenSecretRef:
-                        description: TokenSecretRef authenticates with Vault by presenting
-                          a token.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                    type: object
-                  caBundle:
-                    description: Base64-encoded bundle of PEM CAs which will be used
-                      to validate the certificate chain presented by Vault. Only used
-                      if using HTTPS to connect to Vault and ignored for HTTP connections.
-                      Mutually exclusive with CABundleSecretRef. If neither CABundle
-                      nor CABundleSecretRef are defined, the certificate bundle in
-                      the cert-manager controller container is used to validate the
-                      TLS connection.
-                    format: byte
-                    type: string
-                  caBundleSecretRef:
-                    description: Reference to a Secret containing a bundle of PEM-encoded
-                      CAs to use when verifying the certificate chain presented by
-                      Vault when using HTTPS. Mutually exclusive with CABundle. If
-                      neither CABundle nor CABundleSecretRef are defined, the certificate
-                      bundle in the cert-manager controller container is used to validate
-                      the TLS connection. If no key for the Secret is specified, cert-manager
-                      will default to 'ca.crt'.
-                    properties:
-                      key:
-                        description: The key of the entry in the Secret resource's
-                          `data` field to be used. Some instances of this field may
-                          be defaulted, in others it may be required.
-                        type: string
-                      name:
-                        description: 'Name of the resource being referred to. More
-                          info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                        type: string
-                    required:
-                    - name
-                    type: object
-                  namespace:
-                    description: 'Name of the vault namespace. Namespaces is a set
-                      of features within Vault Enterprise that allows Vault environments
-                      to support Secure Multi-tenancy. e.g: "ns1" More about namespaces
-                      can be found here https://www.vaultproject.io/docs/enterprise/namespaces'
-                    type: string
-                  path:
-                    description: 'Path is the mount path of the Vault PKI backend''s
-                      `sign` endpoint, e.g: "my_pki_mount/sign/my-role-name".'
-                    type: string
-                  server:
-                    description: 'Server is the connection address for the Vault server,
-                      e.g: "https://vault.example.com:8200".'
-                    type: string
-                required:
-                - auth
-                - path
-                - server
-                type: object
-              venafi:
-                description: Venafi configures this issuer to sign certificates using
-                  a Venafi TPP or Venafi Cloud policy zone.
-                properties:
-                  cloud:
-                    description: Cloud specifies the Venafi cloud configuration settings.
-                      Only one of TPP or Cloud may be specified.
-                    properties:
-                      apiTokenSecretRef:
-                        description: APITokenSecretRef is a secret key selector for
-                          the Venafi Cloud API token.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                      url:
-                        description: URL is the base URL for Venafi Cloud. Defaults
-                          to "https://api.venafi.cloud/v1".
-                        type: string
-                    required:
-                    - apiTokenSecretRef
-                    type: object
-                  tpp:
-                    description: TPP specifies Trust Protection Platform configuration
-                      settings. Only one of TPP or Cloud may be specified.
-                    properties:
-                      caBundle:
-                        description: Base64-encoded bundle of PEM CAs which will be
-                          used to validate the certificate chain presented by the
-                          TPP server. Only used if using HTTPS; ignored for HTTP.
-                          If undefined, the certificate bundle in the cert-manager
-                          controller container is used to validate the chain.
-                        format: byte
-                        type: string
-                      credentialsRef:
-                        description: CredentialsRef is a reference to a Secret containing
-                          the username and password for the TPP server. The secret
-                          must contain two keys, 'username' and 'password'.
-                        properties:
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                      url:
-                        description: 'URL is the base URL for the vedsdk endpoint
-                          of the Venafi TPP instance, for example: "https://tpp.example.com/vedsdk".'
-                        type: string
-                    required:
-                    - credentialsRef
-                    - url
-                    type: object
-                  zone:
-                    description: Zone is the Venafi Policy Zone to use for this issuer.
-                      All requests made to the Venafi platform will be restricted
-                      by the named zone policy. This field is required.
-                    type: string
-                required:
-                - zone
-                type: object
-            type: object
-          status:
-            description: Status of the ClusterIssuer. This is set and managed automatically.
-            properties:
-              acme:
-                description: ACME specific status options. This field should only
-                  be set if the Issuer is configured to use an ACME server to issue
-                  certificates.
-                properties:
-                  lastPrivateKeyHash:
-                    description: LastPrivateKeyHash is a hash of the private key associated
-                      with the latest registered ACME account, in order to track changes
-                      made to registered account associated with the Issuer
-                    type: string
-                  lastRegisteredEmail:
-                    description: LastRegisteredEmail is the email associated with
-                      the latest registered ACME account, in order to track changes
-                      made to registered account associated with the  Issuer
-                    type: string
-                  uri:
-                    description: URI is the unique account identifier, which can also
-                      be used to retrieve account details from the CA
-                    type: string
-                type: object
-              conditions:
-                description: List of status conditions to indicate the status of a
-                  CertificateRequest. Known condition types are `Ready`.
-                items:
-                  description: IssuerCondition contains condition information for
-                    an Issuer.
-                  properties:
-                    lastTransitionTime:
-                      description: LastTransitionTime is the timestamp corresponding
-                        to the last status change of this condition.
-                      format: date-time
-                      type: string
-                    message:
-                      description: Message is a human readable description of the
-                        details of the last transition, complementing reason.
-                      type: string
-                    observedGeneration:
-                      description: If set, this represents the .metadata.generation
-                        that the condition was set based upon. For instance, if .metadata.generation
-                        is currently 12, but the .status.condition[x].observedGeneration
-                        is 9, the condition is out of date with respect to the current
-                        state of the Issuer.
-                      format: int64
-                      type: integer
-                    reason:
-                      description: Reason is a brief machine readable explanation
-                        for the condition's last transition.
-                      type: string
-                    status:
-                      description: Status of the condition, one of (`True`, `False`,
-                        `Unknown`).
-                      enum:
-                      - "True"
-                      - "False"
-                      - Unknown
-                      type: string
-                    type:
-                      description: Type of the condition, known values are (`Ready`).
-                      type: string
-                  required:
-                  - status
-                  - type
-                  type: object
-                type: array
-                x-kubernetes-list-map-keys:
-                - type
-                x-kubernetes-list-type: map
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: issuers.cert-manager.io
-spec:
-  group: cert-manager.io
-  names:
-    categories:
-    - cert-manager
-    kind: Issuer
-    listKind: IssuerList
-    plural: issuers
-    singular: issuer
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .status.conditions[?(@.type=="Ready")].status
-      name: Ready
-      type: string
-    - jsonPath: .status.conditions[?(@.type=="Ready")].message
-      name: Status
-      priority: 1
-      type: string
-    - description: CreationTimestamp is a timestamp representing the server time when
-        this object was created. It is not guaranteed to be set in happens-before
-        order across separate operations. Clients may not set this value. It is represented
-        in RFC3339 form and is in UTC.
-      jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: An Issuer represents a certificate issuing authority which can
-          be referenced as part of `issuerRef` fields. It is scoped to a single namespace
-          and can therefore only be referenced by resources within the same namespace.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Desired state of the Issuer resource.
-            properties:
-              acme:
-                description: ACME configures this issuer to communicate with a RFC8555
-                  (ACME) server to obtain signed x509 certificates.
-                properties:
-                  caBundle:
-                    description: Base64-encoded bundle of PEM CAs which can be used
-                      to validate the certificate chain presented by the ACME server.
-                      Mutually exclusive with SkipTLSVerify; prefer using CABundle
-                      to prevent various kinds of security vulnerabilities. If CABundle
-                      and SkipTLSVerify are unset, the system certificate bundle inside
-                      the container is used to validate the TLS connection.
-                    format: byte
-                    type: string
-                  disableAccountKeyGeneration:
-                    description: Enables or disables generating a new ACME account
-                      key. If true, the Issuer resource will *not* request a new account
-                      but will expect the account key to be supplied via an existing
-                      secret. If false, the cert-manager system will generate a new
-                      ACME account key for the Issuer. Defaults to false.
-                    type: boolean
-                  email:
-                    description: Email is the email address to be associated with
-                      the ACME account. This field is optional, but it is strongly
-                      recommended to be set. It will be used to contact you in case
-                      of issues with your account or certificates, including expiry
-                      notification emails. This field may be updated after the account
-                      is initially registered.
-                    type: string
-                  enableDurationFeature:
-                    description: Enables requesting a Not After date on certificates
-                      that matches the duration of the certificate. This is not supported
-                      by all ACME servers like Let's Encrypt. If set to true when
-                      the ACME server does not support it it will create an error
-                      on the Order. Defaults to false.
-                    type: boolean
-                  externalAccountBinding:
-                    description: ExternalAccountBinding is a reference to a CA external
-                      account of the ACME server. If set, upon registration cert-manager
-                      will attempt to associate the given external account credentials
-                      with the registered ACME account.
-                    properties:
-                      keyAlgorithm:
-                        description: 'Deprecated: keyAlgorithm field exists for historical
-                          compatibility reasons and should not be used. The algorithm
-                          is now hardcoded to HS256 in golang/x/crypto/acme.'
-                        enum:
-                        - HS256
-                        - HS384
-                        - HS512
-                        type: string
-                      keyID:
-                        description: keyID is the ID of the CA key that the External
-                          Account is bound to.
-                        type: string
-                      keySecretRef:
-                        description: keySecretRef is a Secret Key Selector referencing
-                          a data item in a Kubernetes Secret which holds the symmetric
-                          MAC key of the External Account Binding. The `key` is the
-                          index string that is paired with the key data in the Secret
-                          and should not be confused with the key data itself, or
-                          indeed with the External Account Binding keyID above. The
-                          secret key stored in the Secret **must** be un-padded, base64
-                          URL encoded data.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                    required:
-                    - keyID
-                    - keySecretRef
-                    type: object
-                  preferredChain:
-                    description: 'PreferredChain is the chain to use if the ACME server
-                      outputs multiple. PreferredChain is no guarantee that this one
-                      gets delivered by the ACME endpoint. For example, for Let''s
-                      Encrypt''s DST crosssign you would use: "DST Root CA X3" or
-                      "ISRG Root X1" for the newer Let''s Encrypt root CA. This value
-                      picks the first certificate bundle in the ACME alternative chains
-                      that has a certificate with this value as its issuer''s CN'
-                    maxLength: 64
-                    type: string
-                  privateKeySecretRef:
-                    description: PrivateKey is the name of a Kubernetes Secret resource
-                      that will be used to store the automatically generated ACME
-                      account private key. Optionally, a `key` may be specified to
-                      select a specific entry within the named Secret resource. If
-                      `key` is not specified, a default of `tls.key` will be used.
-                    properties:
-                      key:
-                        description: The key of the entry in the Secret resource's
-                          `data` field to be used. Some instances of this field may
-                          be defaulted, in others it may be required.
-                        type: string
-                      name:
-                        description: 'Name of the resource being referred to. More
-                          info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                        type: string
-                    required:
-                    - name
-                    type: object
-                  server:
-                    description: 'Server is the URL used to access the ACME server''s
-                      ''directory'' endpoint. For example, for Let''s Encrypt''s staging
-                      endpoint, you would use: "https://acme-staging-v02.api.letsencrypt.org/directory".
-                      Only ACME v2 endpoints (i.e. RFC 8555) are supported.'
-                    type: string
-                  skipTLSVerify:
-                    description: 'INSECURE: Enables or disables validation of the
-                      ACME server TLS certificate. If true, requests to the ACME server
-                      will not have the TLS certificate chain validated. Mutually
-                      exclusive with CABundle; prefer using CABundle to prevent various
-                      kinds of security vulnerabilities. Only enable this option in
-                      development environments. If CABundle and SkipTLSVerify are
-                      unset, the system certificate bundle inside the container is
-                      used to validate the TLS connection. Defaults to false.'
-                    type: boolean
-                  solvers:
-                    description: 'Solvers is a list of challenge solvers that will
-                      be used to solve ACME challenges for the matching domains. Solver
-                      configurations must be provided in order to obtain certificates
-                      from an ACME server. For more information, see: https://cert-manager.io/docs/configuration/acme/'
-                    items:
-                      description: An ACMEChallengeSolver describes how to solve ACME
-                        challenges for the issuer it is part of. A selector may be
-                        provided to use different solving strategies for different
-                        DNS names. Only one of HTTP01 or DNS01 must be provided.
-                      properties:
-                        dns01:
-                          description: Configures cert-manager to attempt to complete
-                            authorizations by performing the DNS01 challenge flow.
-                          properties:
-                            acmeDNS:
-                              description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
-                                API to manage DNS01 challenge records.
-                              properties:
-                                accountSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                host:
-                                  type: string
-                              required:
-                              - accountSecretRef
-                              - host
-                              type: object
-                            akamai:
-                              description: Use the Akamai DNS zone management API
-                                to manage DNS01 challenge records.
-                              properties:
-                                accessTokenSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                clientSecretSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                clientTokenSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                serviceConsumerDomain:
-                                  type: string
-                              required:
-                              - accessTokenSecretRef
-                              - clientSecretSecretRef
-                              - clientTokenSecretRef
-                              - serviceConsumerDomain
-                              type: object
-                            azureDNS:
-                              description: Use the Microsoft Azure DNS API to manage
-                                DNS01 challenge records.
-                              properties:
-                                clientID:
-                                  description: if both this and ClientSecret are left
-                                    unset MSI will be used
-                                  type: string
-                                clientSecretSecretRef:
-                                  description: if both this and ClientID are left
-                                    unset MSI will be used
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                environment:
-                                  description: name of the Azure environment (default
-                                    AzurePublicCloud)
-                                  enum:
-                                  - AzurePublicCloud
-                                  - AzureChinaCloud
-                                  - AzureGermanCloud
-                                  - AzureUSGovernmentCloud
-                                  type: string
-                                hostedZoneName:
-                                  description: name of the DNS zone that should be
-                                    used
-                                  type: string
-                                managedIdentity:
-                                  description: managed identity configuration, can
-                                    not be used at the same time as clientID, clientSecretSecretRef
-                                    or tenantID
-                                  properties:
-                                    clientID:
-                                      description: client ID of the managed identity,
-                                        can not be used at the same time as resourceID
-                                      type: string
-                                    resourceID:
-                                      description: resource ID of the managed identity,
-                                        can not be used at the same time as clientID
-                                      type: string
-                                  type: object
-                                resourceGroupName:
-                                  description: resource group the DNS zone is located
-                                    in
-                                  type: string
-                                subscriptionID:
-                                  description: ID of the Azure subscription
-                                  type: string
-                                tenantID:
-                                  description: when specifying ClientID and ClientSecret
-                                    then this field is also needed
-                                  type: string
-                              required:
-                              - resourceGroupName
-                              - subscriptionID
-                              type: object
-                            cloudDNS:
-                              description: Use the Google Cloud DNS API to manage
-                                DNS01 challenge records.
-                              properties:
-                                hostedZoneName:
-                                  description: HostedZoneName is an optional field
-                                    that tells cert-manager in which Cloud DNS zone
-                                    the challenge record has to be created. If left
-                                    empty cert-manager will automatically choose a
-                                    zone.
-                                  type: string
-                                project:
-                                  type: string
-                                serviceAccountSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - project
-                              type: object
-                            cloudflare:
-                              description: Use the Cloudflare API to manage DNS01
-                                challenge records.
-                              properties:
-                                apiKeySecretRef:
-                                  description: 'API key to use to authenticate with
-                                    Cloudflare. Note: using an API token to authenticate
-                                    is now the recommended method as it allows greater
-                                    control of permissions.'
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                apiTokenSecretRef:
-                                  description: API token used to authenticate with
-                                    Cloudflare.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                email:
-                                  description: Email of the account, only required
-                                    when using API key based authentication.
-                                  type: string
-                              type: object
-                            cnameStrategy:
-                              description: CNAMEStrategy configures how the DNS01
-                                provider should handle CNAME records when found in
-                                DNS zones.
-                              enum:
-                              - None
-                              - Follow
-                              type: string
-                            digitalocean:
-                              description: Use the DigitalOcean DNS API to manage
-                                DNS01 challenge records.
-                              properties:
-                                tokenSecretRef:
-                                  description: A reference to a specific 'key' within
-                                    a Secret resource. In some instances, `key` is
-                                    a required field.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - tokenSecretRef
-                              type: object
-                            rfc2136:
-                              description: Use RFC2136 ("Dynamic Updates in the Domain
-                                Name System") (https://datatracker.ietf.org/doc/rfc2136/)
-                                to manage DNS01 challenge records.
-                              properties:
-                                nameserver:
-                                  description: The IP address or hostname of an authoritative
-                                    DNS server supporting RFC2136 in the form host:port.
-                                    If the host is an IPv6 address it must be enclosed
-                                    in square brackets (e.g [2001:db8::1]) ; port
-                                    is optional. This field is required.
-                                  type: string
-                                tsigAlgorithm:
-                                  description: 'The TSIG Algorithm configured in the
-                                    DNS supporting RFC2136. Used only when ``tsigSecretSecretRef``
-                                    and ``tsigKeyName`` are defined. Supported values
-                                    are (case-insensitive): ``HMACMD5`` (default),
-                                    ``HMACSHA1``, ``HMACSHA256`` or ``HMACSHA512``.'
-                                  type: string
-                                tsigKeyName:
-                                  description: The TSIG Key name configured in the
-                                    DNS. If ``tsigSecretSecretRef`` is defined, this
-                                    field is required.
-                                  type: string
-                                tsigSecretSecretRef:
-                                  description: The name of the secret containing the
-                                    TSIG value. If ``tsigKeyName`` is defined, this
-                                    field is required.
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - nameserver
-                              type: object
-                            route53:
-                              description: Use the AWS Route53 API to manage DNS01
-                                challenge records.
-                              properties:
-                                accessKeyID:
-                                  description: 'The AccessKeyID is used for authentication.
-                                    Cannot be set when SecretAccessKeyID is set. If
-                                    neither the Access Key nor Key ID are set, we
-                                    fall-back to using env vars, shared credentials
-                                    file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                                  type: string
-                                accessKeyIDSecretRef:
-                                  description: 'The SecretAccessKey is used for authentication.
-                                    If set, pull the AWS access key ID from a key
-                                    within a Kubernetes Secret. Cannot be set when
-                                    AccessKeyID is set. If neither the Access Key
-                                    nor Key ID are set, we fall-back to using env
-                                    vars, shared credentials file or AWS Instance
-                                    metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                hostedZoneID:
-                                  description: If set, the provider will manage only
-                                    this zone in Route53 and will not do an lookup
-                                    using the route53:ListHostedZonesByName api call.
-                                  type: string
-                                region:
-                                  description: Always set the region when using AccessKeyID
-                                    and SecretAccessKey
-                                  type: string
-                                role:
-                                  description: Role is a Role ARN which the Route53
-                                    provider will assume using either the explicit
-                                    credentials AccessKeyID/SecretAccessKey or the
-                                    inferred credentials from environment variables,
-                                    shared credentials file or AWS Instance metadata
-                                  type: string
-                                secretAccessKeySecretRef:
-                                  description: 'The SecretAccessKey is used for authentication.
-                                    If neither the Access Key nor Key ID are set,
-                                    we fall-back to using env vars, shared credentials
-                                    file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials'
-                                  properties:
-                                    key:
-                                      description: The key of the entry in the Secret
-                                        resource's `data` field to be used. Some instances
-                                        of this field may be defaulted, in others
-                                        it may be required.
-                                      type: string
-                                    name:
-                                      description: 'Name of the resource being referred
-                                        to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                              required:
-                              - region
-                              type: object
-                            webhook:
-                              description: Configure an external webhook based DNS01
-                                challenge solver to manage DNS01 challenge records.
-                              properties:
-                                config:
-                                  description: Additional configuration that should
-                                    be passed to the webhook apiserver when challenges
-                                    are processed. This can contain arbitrary JSON
-                                    data. Secret values should not be specified in
-                                    this stanza. If secret values are needed (e.g.
-                                    credentials for a DNS service), you should use
-                                    a SecretKeySelector to reference a Secret resource.
-                                    For details on the schema of this field, consult
-                                    the webhook provider implementation's documentation.
-                                  x-kubernetes-preserve-unknown-fields: true
-                                groupName:
-                                  description: The API group name that should be used
-                                    when POSTing ChallengePayload resources to the
-                                    webhook apiserver. This should be the same as
-                                    the GroupName specified in the webhook provider
-                                    implementation.
-                                  type: string
-                                solverName:
-                                  description: The name of the solver to use, as defined
-                                    in the webhook provider implementation. This will
-                                    typically be the name of the provider, e.g. 'cloudflare'.
-                                  type: string
-                              required:
-                              - groupName
-                              - solverName
-                              type: object
-                          type: object
-                        http01:
-                          description: Configures cert-manager to attempt to complete
-                            authorizations by performing the HTTP01 challenge flow.
-                            It is not possible to obtain certificates for wildcard
-                            domain names (e.g. `*.example.com`) using the HTTP01 challenge
-                            mechanism.
-                          properties:
-                            gatewayHTTPRoute:
-                              description: The Gateway API is a sig-network community
-                                API that models service networking in Kubernetes (https://gateway-api.sigs.k8s.io/).
-                                The Gateway solver will create HTTPRoutes with the
-                                specified labels in the same namespace as the challenge.
-                                This solver is experimental, and fields / behaviour
-                                may change in the future.
-                              properties:
-                                labels:
-                                  additionalProperties:
-                                    type: string
-                                  description: Custom labels that will be applied
-                                    to HTTPRoutes created by cert-manager while solving
-                                    HTTP-01 challenges.
-                                  type: object
-                                parentRefs:
-                                  description: 'When solving an HTTP-01 challenge,
-                                    cert-manager creates an HTTPRoute. cert-manager
-                                    needs to know which parentRefs should be used
-                                    when creating the HTTPRoute. Usually, the parentRef
-                                    references a Gateway. See: https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways'
-                                  items:
-                                    description: "ParentReference identifies an API
-                                      object (usually a Gateway) that can be considered
-                                      a parent of this resource (usually a route).
-                                      The only kind of parent resource with \"Core\"
-                                      support is Gateway. This API may be extended
-                                      in the future to support additional kinds of
-                                      parent resources, such as HTTPRoute. \n The
-                                      API object must be valid in the cluster; the
-                                      Group and Kind must be registered in the cluster
-                                      for this reference to be valid."
-                                    properties:
-                                      group:
-                                        default: gateway.networking.k8s.io
-                                        description: "Group is the group of the referent.
-                                          When unspecified, \"gateway.networking.k8s.io\"
-                                          is inferred. To set the core API group (such
-                                          as for a \"Service\" kind referent), Group
-                                          must be explicitly set to \"\" (empty string).
-                                          \n Support: Core"
-                                        maxLength: 253
-                                        pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
-                                        type: string
-                                      kind:
-                                        default: Gateway
-                                        description: "Kind is kind of the referent.
-                                          \n Support: Core (Gateway) \n Support: Implementation-specific
-                                          (Other Resources)"
-                                        maxLength: 63
-                                        minLength: 1
-                                        pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
-                                        type: string
-                                      name:
-                                        description: "Name is the name of the referent.
-                                          \n Support: Core"
-                                        maxLength: 253
-                                        minLength: 1
-                                        type: string
-                                      namespace:
-                                        description: "Namespace is the namespace of
-                                          the referent. When unspecified, this refers
-                                          to the local namespace of the Route. \n
-                                          Note that there are specific rules for ParentRefs
-                                          which cross namespace boundaries. Cross-namespace
-                                          references are only valid if they are explicitly
-                                          allowed by something in the namespace they
-                                          are referring to. For example: Gateway has
-                                          the AllowedRoutes field, and ReferenceGrant
-                                          provides a generic way to enable any other
-                                          kind of cross-namespace reference. \n Support:
-                                          Core"
-                                        maxLength: 63
-                                        minLength: 1
-                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
-                                        type: string
-                                      port:
-                                        description: "Port is the network port this
-                                          Route targets. It can be interpreted differently
-                                          based on the type of parent resource. \n
-                                          When the parent resource is a Gateway, this
-                                          targets all listeners listening on the specified
-                                          port that also support this kind of Route(and
-                                          select this Route). It's not recommended
-                                          to set `Port` unless the networking behaviors
-                                          specified in a Route must apply to a specific
-                                          port as opposed to a listener(s) whose port(s)
-                                          may be changed. When both Port and SectionName
-                                          are specified, the name and port of the
-                                          selected listener must match both specified
-                                          values. \n Implementations MAY choose to
-                                          support other parent resources. Implementations
-                                          supporting other types of parent resources
-                                          MUST clearly document how/if Port is interpreted.
-                                          \n For the purpose of status, an attachment
-                                          is considered successful as long as the
-                                          parent resource accepts it partially. For
-                                          example, Gateway listeners can restrict
-                                          which Routes can attach to them by Route
-                                          kind, namespace, or hostname. If 1 of 2
-                                          Gateway listeners accept attachment from
-                                          the referencing Route, the Route MUST be
-                                          considered successfully attached. If no
-                                          Gateway listeners accept attachment from
-                                          this Route, the Route MUST be considered
-                                          detached from the Gateway. \n Support: Extended
-                                          \n <gateway:experimental>"
-                                        format: int32
-                                        maximum: 65535
-                                        minimum: 1
-                                        type: integer
-                                      sectionName:
-                                        description: "SectionName is the name of a
-                                          section within the target resource. In the
-                                          following resources, SectionName is interpreted
-                                          as the following: \n * Gateway: Listener
-                                          Name. When both Port (experimental) and
-                                          SectionName are specified, the name and
-                                          port of the selected listener must match
-                                          both specified values. \n Implementations
-                                          MAY choose to support attaching Routes to
-                                          other resources. If that is the case, they
-                                          MUST clearly document how SectionName is
-                                          interpreted. \n When unspecified (empty
-                                          string), this will reference the entire
-                                          resource. For the purpose of status, an
-                                          attachment is considered successful if at
-                                          least one section in the parent resource
-                                          accepts it. For example, Gateway listeners
-                                          can restrict which Routes can attach to
-                                          them by Route kind, namespace, or hostname.
-                                          If 1 of 2 Gateway listeners accept attachment
-                                          from the referencing Route, the Route MUST
-                                          be considered successfully attached. If
-                                          no Gateway listeners accept attachment from
-                                          this Route, the Route MUST be considered
-                                          detached from the Gateway. \n Support: Core"
-                                        maxLength: 253
-                                        minLength: 1
-                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
-                                        type: string
-                                    required:
-                                    - name
-                                    type: object
-                                  type: array
-                                serviceType:
-                                  description: Optional service type for Kubernetes
-                                    solver service. Supported values are NodePort
-                                    or ClusterIP. If unset, defaults to NodePort.
-                                  type: string
-                              type: object
-                            ingress:
-                              description: The ingress based HTTP01 challenge solver
-                                will solve challenges by creating or modifying Ingress
-                                resources in order to route requests for '/.well-known/acme-challenge/XYZ'
-                                to 'challenge solver' pods that are provisioned by
-                                cert-manager for each Challenge to be completed.
-                              properties:
-                                class:
-                                  description: This field configures the annotation
-                                    `kubernetes.io/ingress.class` when creating Ingress
-                                    resources to solve ACME challenges that use this
-                                    challenge solver. Only one of `class`, `name`
-                                    or `ingressClassName` may be specified.
-                                  type: string
-                                ingressClassName:
-                                  description: This field configures the field `ingressClassName`
-                                    on the created Ingress resources used to solve
-                                    ACME challenges that use this challenge solver.
-                                    This is the recommended way of configuring the
-                                    ingress class. Only one of `class`, `name` or
-                                    `ingressClassName` may be specified.
-                                  type: string
-                                ingressTemplate:
-                                  description: Optional ingress template used to configure
-                                    the ACME challenge solver ingress used for HTTP01
-                                    challenges.
-                                  properties:
-                                    metadata:
-                                      description: ObjectMeta overrides for the ingress
-                                        used to solve HTTP01 challenges. Only the
-                                        'labels' and 'annotations' fields may be set.
-                                        If labels or annotations overlap with in-built
-                                        values, the values here will override the
-                                        in-built values.
-                                      properties:
-                                        annotations:
-                                          additionalProperties:
-                                            type: string
-                                          description: Annotations that should be
-                                            added to the created ACME HTTP01 solver
-                                            ingress.
-                                          type: object
-                                        labels:
-                                          additionalProperties:
-                                            type: string
-                                          description: Labels that should be added
-                                            to the created ACME HTTP01 solver ingress.
-                                          type: object
-                                      type: object
-                                  type: object
-                                name:
-                                  description: The name of the ingress resource that
-                                    should have ACME challenge solving routes inserted
-                                    into it in order to solve HTTP01 challenges. This
-                                    is typically used in conjunction with ingress
-                                    controllers like ingress-gce, which maintains
-                                    a 1:1 mapping between external IPs and ingress
-                                    resources. Only one of `class`, `name` or `ingressClassName`
-                                    may be specified.
-                                  type: string
-                                podTemplate:
-                                  description: Optional pod template used to configure
-                                    the ACME challenge solver pods used for HTTP01
-                                    challenges.
-                                  properties:
-                                    metadata:
-                                      description: ObjectMeta overrides for the pod
-                                        used to solve HTTP01 challenges. Only the
-                                        'labels' and 'annotations' fields may be set.
-                                        If labels or annotations overlap with in-built
-                                        values, the values here will override the
-                                        in-built values.
-                                      properties:
-                                        annotations:
-                                          additionalProperties:
-                                            type: string
-                                          description: Annotations that should be
-                                            added to the create ACME HTTP01 solver
-                                            pods.
-                                          type: object
-                                        labels:
-                                          additionalProperties:
-                                            type: string
-                                          description: Labels that should be added
-                                            to the created ACME HTTP01 solver pods.
-                                          type: object
-                                      type: object
-                                    spec:
-                                      description: PodSpec defines overrides for the
-                                        HTTP01 challenge solver pod. Check ACMEChallengeSolverHTTP01IngressPodSpec
-                                        to find out currently supported fields. All
-                                        other fields will be ignored.
-                                      properties:
-                                        affinity:
-                                          description: If specified, the pod's scheduling
-                                            constraints
-                                          properties:
-                                            nodeAffinity:
-                                              description: Describes node affinity
-                                                scheduling rules for the pod.
-                                              properties:
-                                                preferredDuringSchedulingIgnoredDuringExecution:
-                                                  description: The scheduler will
-                                                    prefer to schedule pods to nodes
-                                                    that satisfy the affinity expressions
-                                                    specified by this field, but it
-                                                    may choose a node that violates
-                                                    one or more of the expressions.
-                                                    The node that is most preferred
-                                                    is the one with the greatest sum
-                                                    of weights, i.e. for each node
-                                                    that meets all of the scheduling
-                                                    requirements (resource request,
-                                                    requiredDuringScheduling affinity
-                                                    expressions, etc.), compute a
-                                                    sum by iterating through the elements
-                                                    of this field and adding "weight"
-                                                    to the sum if the node matches
-                                                    the corresponding matchExpressions;
-                                                    the node(s) with the highest sum
-                                                    are the most preferred.
-                                                  items:
-                                                    description: An empty preferred
-                                                      scheduling term matches all
-                                                      objects with implicit weight
-                                                      0 (i.e. it's a no-op). A null
-                                                      preferred scheduling term matches
-                                                      no objects (i.e. is also a no-op).
-                                                    properties:
-                                                      preference:
-                                                        description: A node selector
-                                                          term, associated with the
-                                                          corresponding weight.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's labels.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchFields:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's fields.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      weight:
-                                                        description: Weight associated
-                                                          with matching the corresponding
-                                                          nodeSelectorTerm, in the
-                                                          range 1-100.
-                                                        format: int32
-                                                        type: integer
-                                                    required:
-                                                    - preference
-                                                    - weight
-                                                    type: object
-                                                  type: array
-                                                requiredDuringSchedulingIgnoredDuringExecution:
-                                                  description: If the affinity requirements
-                                                    specified by this field are not
-                                                    met at scheduling time, the pod
-                                                    will not be scheduled onto the
-                                                    node. If the affinity requirements
-                                                    specified by this field cease
-                                                    to be met at some point during
-                                                    pod execution (e.g. due to an
-                                                    update), the system may or may
-                                                    not try to eventually evict the
-                                                    pod from its node.
-                                                  properties:
-                                                    nodeSelectorTerms:
-                                                      description: Required. A list
-                                                        of node selector terms. The
-                                                        terms are ORed.
-                                                      items:
-                                                        description: A null or empty
-                                                          node selector term matches
-                                                          no objects. The requirements
-                                                          of them are ANDed. The TopologySelectorTerm
-                                                          type implements a subset
-                                                          of the NodeSelectorTerm.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's labels.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchFields:
-                                                            description: A list of
-                                                              node selector requirements
-                                                              by node's fields.
-                                                            items:
-                                                              description: A node
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: The
-                                                                    label key that
-                                                                    the selector applies
-                                                                    to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: Represents
-                                                                    a key's relationship
-                                                                    to a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists, DoesNotExist.
-                                                                    Gt, and Lt.
-                                                                  type: string
-                                                                values:
-                                                                  description: An
-                                                                    array of string
-                                                                    values. If the
-                                                                    operator is In
-                                                                    or NotIn, the
-                                                                    values array must
-                                                                    be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    If the operator
-                                                                    is Gt or Lt, the
-                                                                    values array must
-                                                                    have a single
-                                                                    element, which
-                                                                    will be interpreted
-                                                                    as an integer.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      type: array
-                                                  required:
-                                                  - nodeSelectorTerms
-                                                  type: object
-                                                  x-kubernetes-map-type: atomic
-                                              type: object
-                                            podAffinity:
-                                              description: Describes pod affinity
-                                                scheduling rules (e.g. co-locate this
-                                                pod in the same node, zone, etc. as
-                                                some other pod(s)).
-                                              properties:
-                                                preferredDuringSchedulingIgnoredDuringExecution:
-                                                  description: The scheduler will
-                                                    prefer to schedule pods to nodes
-                                                    that satisfy the affinity expressions
-                                                    specified by this field, but it
-                                                    may choose a node that violates
-                                                    one or more of the expressions.
-                                                    The node that is most preferred
-                                                    is the one with the greatest sum
-                                                    of weights, i.e. for each node
-                                                    that meets all of the scheduling
-                                                    requirements (resource request,
-                                                    requiredDuringScheduling affinity
-                                                    expressions, etc.), compute a
-                                                    sum by iterating through the elements
-                                                    of this field and adding "weight"
-                                                    to the sum if the node has pods
-                                                    which matches the corresponding
-                                                    podAffinityTerm; the node(s) with
-                                                    the highest sum are the most preferred.
-                                                  items:
-                                                    description: The weights of all
-                                                      of the matched WeightedPodAffinityTerm
-                                                      fields are added per-node to
-                                                      find the most preferred node(s)
-                                                    properties:
-                                                      podAffinityTerm:
-                                                        description: Required. A pod
-                                                          affinity term, associated
-                                                          with the corresponding weight.
-                                                        properties:
-                                                          labelSelector:
-                                                            description: A label query
-                                                              over a set of resources,
-                                                              in this case pods.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaceSelector:
-                                                            description: A label query
-                                                              over the set of namespaces
-                                                              that the term applies
-                                                              to. The term is applied
-                                                              to the union of the
-                                                              namespaces selected
-                                                              by this field and the
-                                                              ones listed in the namespaces
-                                                              field. null selector
-                                                              and null or empty namespaces
-                                                              list means "this pod's
-                                                              namespace". An empty
-                                                              selector ({}) matches
-                                                              all namespaces.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaces:
-                                                            description: namespaces
-                                                              specifies a static list
-                                                              of namespace names that
-                                                              the term applies to.
-                                                              The term is applied
-                                                              to the union of the
-                                                              namespaces listed in
-                                                              this field and the ones
-                                                              selected by namespaceSelector.
-                                                              null or empty namespaces
-                                                              list and null namespaceSelector
-                                                              means "this pod's namespace".
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                          topologyKey:
-                                                            description: This pod
-                                                              should be co-located
-                                                              (affinity) or not co-located
-                                                              (anti-affinity) with
-                                                              the pods matching the
-                                                              labelSelector in the
-                                                              specified namespaces,
-                                                              where co-located is
-                                                              defined as running on
-                                                              a node whose value of
-                                                              the label with key topologyKey
-                                                              matches that of any
-                                                              node on which any of
-                                                              the selected pods is
-                                                              running. Empty topologyKey
-                                                              is not allowed.
-                                                            type: string
-                                                        required:
-                                                        - topologyKey
-                                                        type: object
-                                                      weight:
-                                                        description: weight associated
-                                                          with matching the corresponding
-                                                          podAffinityTerm, in the
-                                                          range 1-100.
-                                                        format: int32
-                                                        type: integer
-                                                    required:
-                                                    - podAffinityTerm
-                                                    - weight
-                                                    type: object
-                                                  type: array
-                                                requiredDuringSchedulingIgnoredDuringExecution:
-                                                  description: If the affinity requirements
-                                                    specified by this field are not
-                                                    met at scheduling time, the pod
-                                                    will not be scheduled onto the
-                                                    node. If the affinity requirements
-                                                    specified by this field cease
-                                                    to be met at some point during
-                                                    pod execution (e.g. due to a pod
-                                                    label update), the system may
-                                                    or may not try to eventually evict
-                                                    the pod from its node. When there
-                                                    are multiple elements, the lists
-                                                    of nodes corresponding to each
-                                                    podAffinityTerm are intersected,
-                                                    i.e. all terms must be satisfied.
-                                                  items:
-                                                    description: Defines a set of
-                                                      pods (namely those matching
-                                                      the labelSelector relative to
-                                                      the given namespace(s)) that
-                                                      this pod should be co-located
-                                                      (affinity) or not co-located
-                                                      (anti-affinity) with, where
-                                                      co-located is defined as running
-                                                      on a node whose value of the
-                                                      label with key <topologyKey>
-                                                      matches that of any node on
-                                                      which a pod of the set of pods
-                                                      is running
-                                                    properties:
-                                                      labelSelector:
-                                                        description: A label query
-                                                          over a set of resources,
-                                                          in this case pods.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaceSelector:
-                                                        description: A label query
-                                                          over the set of namespaces
-                                                          that the term applies to.
-                                                          The term is applied to the
-                                                          union of the namespaces
-                                                          selected by this field and
-                                                          the ones listed in the namespaces
-                                                          field. null selector and
-                                                          null or empty namespaces
-                                                          list means "this pod's namespace".
-                                                          An empty selector ({}) matches
-                                                          all namespaces.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaces:
-                                                        description: namespaces specifies
-                                                          a static list of namespace
-                                                          names that the term applies
-                                                          to. The term is applied
-                                                          to the union of the namespaces
-                                                          listed in this field and
-                                                          the ones selected by namespaceSelector.
-                                                          null or empty namespaces
-                                                          list and null namespaceSelector
-                                                          means "this pod's namespace".
-                                                        items:
-                                                          type: string
-                                                        type: array
-                                                      topologyKey:
-                                                        description: This pod should
-                                                          be co-located (affinity)
-                                                          or not co-located (anti-affinity)
-                                                          with the pods matching the
-                                                          labelSelector in the specified
-                                                          namespaces, where co-located
-                                                          is defined as running on
-                                                          a node whose value of the
-                                                          label with key topologyKey
-                                                          matches that of any node
-                                                          on which any of the selected
-                                                          pods is running. Empty topologyKey
-                                                          is not allowed.
-                                                        type: string
-                                                    required:
-                                                    - topologyKey
-                                                    type: object
-                                                  type: array
-                                              type: object
-                                            podAntiAffinity:
-                                              description: Describes pod anti-affinity
-                                                scheduling rules (e.g. avoid putting
-                                                this pod in the same node, zone, etc.
-                                                as some other pod(s)).
-                                              properties:
-                                                preferredDuringSchedulingIgnoredDuringExecution:
-                                                  description: The scheduler will
-                                                    prefer to schedule pods to nodes
-                                                    that satisfy the anti-affinity
-                                                    expressions specified by this
-                                                    field, but it may choose a node
-                                                    that violates one or more of the
-                                                    expressions. The node that is
-                                                    most preferred is the one with
-                                                    the greatest sum of weights, i.e.
-                                                    for each node that meets all of
-                                                    the scheduling requirements (resource
-                                                    request, requiredDuringScheduling
-                                                    anti-affinity expressions, etc.),
-                                                    compute a sum by iterating through
-                                                    the elements of this field and
-                                                    adding "weight" to the sum if
-                                                    the node has pods which matches
-                                                    the corresponding podAffinityTerm;
-                                                    the node(s) with the highest sum
-                                                    are the most preferred.
-                                                  items:
-                                                    description: The weights of all
-                                                      of the matched WeightedPodAffinityTerm
-                                                      fields are added per-node to
-                                                      find the most preferred node(s)
-                                                    properties:
-                                                      podAffinityTerm:
-                                                        description: Required. A pod
-                                                          affinity term, associated
-                                                          with the corresponding weight.
-                                                        properties:
-                                                          labelSelector:
-                                                            description: A label query
-                                                              over a set of resources,
-                                                              in this case pods.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaceSelector:
-                                                            description: A label query
-                                                              over the set of namespaces
-                                                              that the term applies
-                                                              to. The term is applied
-                                                              to the union of the
-                                                              namespaces selected
-                                                              by this field and the
-                                                              ones listed in the namespaces
-                                                              field. null selector
-                                                              and null or empty namespaces
-                                                              list means "this pod's
-                                                              namespace". An empty
-                                                              selector ({}) matches
-                                                              all namespaces.
-                                                            properties:
-                                                              matchExpressions:
-                                                                description: matchExpressions
-                                                                  is a list of label
-                                                                  selector requirements.
-                                                                  The requirements
-                                                                  are ANDed.
-                                                                items:
-                                                                  description: A label
-                                                                    selector requirement
-                                                                    is a selector
-                                                                    that contains
-                                                                    values, a key,
-                                                                    and an operator
-                                                                    that relates the
-                                                                    key and values.
-                                                                  properties:
-                                                                    key:
-                                                                      description: key
-                                                                        is the label
-                                                                        key that the
-                                                                        selector applies
-                                                                        to.
-                                                                      type: string
-                                                                    operator:
-                                                                      description: operator
-                                                                        represents
-                                                                        a key's relationship
-                                                                        to a set of
-                                                                        values. Valid
-                                                                        operators
-                                                                        are In, NotIn,
-                                                                        Exists and
-                                                                        DoesNotExist.
-                                                                      type: string
-                                                                    values:
-                                                                      description: values
-                                                                        is an array
-                                                                        of string
-                                                                        values. If
-                                                                        the operator
-                                                                        is In or NotIn,
-                                                                        the values
-                                                                        array must
-                                                                        be non-empty.
-                                                                        If the operator
-                                                                        is Exists
-                                                                        or DoesNotExist,
-                                                                        the values
-                                                                        array must
-                                                                        be empty.
-                                                                        This array
-                                                                        is replaced
-                                                                        during a strategic
-                                                                        merge patch.
-                                                                      items:
-                                                                        type: string
-                                                                      type: array
-                                                                  required:
-                                                                  - key
-                                                                  - operator
-                                                                  type: object
-                                                                type: array
-                                                              matchLabels:
-                                                                additionalProperties:
-                                                                  type: string
-                                                                description: matchLabels
-                                                                  is a map of {key,value}
-                                                                  pairs. A single
-                                                                  {key,value} in the
-                                                                  matchLabels map
-                                                                  is equivalent to
-                                                                  an element of matchExpressions,
-                                                                  whose key field
-                                                                  is "key", the operator
-                                                                  is "In", and the
-                                                                  values array contains
-                                                                  only "value". The
-                                                                  requirements are
-                                                                  ANDed.
-                                                                type: object
-                                                            type: object
-                                                            x-kubernetes-map-type: atomic
-                                                          namespaces:
-                                                            description: namespaces
-                                                              specifies a static list
-                                                              of namespace names that
-                                                              the term applies to.
-                                                              The term is applied
-                                                              to the union of the
-                                                              namespaces listed in
-                                                              this field and the ones
-                                                              selected by namespaceSelector.
-                                                              null or empty namespaces
-                                                              list and null namespaceSelector
-                                                              means "this pod's namespace".
-                                                            items:
-                                                              type: string
-                                                            type: array
-                                                          topologyKey:
-                                                            description: This pod
-                                                              should be co-located
-                                                              (affinity) or not co-located
-                                                              (anti-affinity) with
-                                                              the pods matching the
-                                                              labelSelector in the
-                                                              specified namespaces,
-                                                              where co-located is
-                                                              defined as running on
-                                                              a node whose value of
-                                                              the label with key topologyKey
-                                                              matches that of any
-                                                              node on which any of
-                                                              the selected pods is
-                                                              running. Empty topologyKey
-                                                              is not allowed.
-                                                            type: string
-                                                        required:
-                                                        - topologyKey
-                                                        type: object
-                                                      weight:
-                                                        description: weight associated
-                                                          with matching the corresponding
-                                                          podAffinityTerm, in the
-                                                          range 1-100.
-                                                        format: int32
-                                                        type: integer
-                                                    required:
-                                                    - podAffinityTerm
-                                                    - weight
-                                                    type: object
-                                                  type: array
-                                                requiredDuringSchedulingIgnoredDuringExecution:
-                                                  description: If the anti-affinity
-                                                    requirements specified by this
-                                                    field are not met at scheduling
-                                                    time, the pod will not be scheduled
-                                                    onto the node. If the anti-affinity
-                                                    requirements specified by this
-                                                    field cease to be met at some
-                                                    point during pod execution (e.g.
-                                                    due to a pod label update), the
-                                                    system may or may not try to eventually
-                                                    evict the pod from its node. When
-                                                    there are multiple elements, the
-                                                    lists of nodes corresponding to
-                                                    each podAffinityTerm are intersected,
-                                                    i.e. all terms must be satisfied.
-                                                  items:
-                                                    description: Defines a set of
-                                                      pods (namely those matching
-                                                      the labelSelector relative to
-                                                      the given namespace(s)) that
-                                                      this pod should be co-located
-                                                      (affinity) or not co-located
-                                                      (anti-affinity) with, where
-                                                      co-located is defined as running
-                                                      on a node whose value of the
-                                                      label with key <topologyKey>
-                                                      matches that of any node on
-                                                      which a pod of the set of pods
-                                                      is running
-                                                    properties:
-                                                      labelSelector:
-                                                        description: A label query
-                                                          over a set of resources,
-                                                          in this case pods.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaceSelector:
-                                                        description: A label query
-                                                          over the set of namespaces
-                                                          that the term applies to.
-                                                          The term is applied to the
-                                                          union of the namespaces
-                                                          selected by this field and
-                                                          the ones listed in the namespaces
-                                                          field. null selector and
-                                                          null or empty namespaces
-                                                          list means "this pod's namespace".
-                                                          An empty selector ({}) matches
-                                                          all namespaces.
-                                                        properties:
-                                                          matchExpressions:
-                                                            description: matchExpressions
-                                                              is a list of label selector
-                                                              requirements. The requirements
-                                                              are ANDed.
-                                                            items:
-                                                              description: A label
-                                                                selector requirement
-                                                                is a selector that
-                                                                contains values, a
-                                                                key, and an operator
-                                                                that relates the key
-                                                                and values.
-                                                              properties:
-                                                                key:
-                                                                  description: key
-                                                                    is the label key
-                                                                    that the selector
-                                                                    applies to.
-                                                                  type: string
-                                                                operator:
-                                                                  description: operator
-                                                                    represents a key's
-                                                                    relationship to
-                                                                    a set of values.
-                                                                    Valid operators
-                                                                    are In, NotIn,
-                                                                    Exists and DoesNotExist.
-                                                                  type: string
-                                                                values:
-                                                                  description: values
-                                                                    is an array of
-                                                                    string values.
-                                                                    If the operator
-                                                                    is In or NotIn,
-                                                                    the values array
-                                                                    must be non-empty.
-                                                                    If the operator
-                                                                    is Exists or DoesNotExist,
-                                                                    the values array
-                                                                    must be empty.
-                                                                    This array is
-                                                                    replaced during
-                                                                    a strategic merge
-                                                                    patch.
-                                                                  items:
-                                                                    type: string
-                                                                  type: array
-                                                              required:
-                                                              - key
-                                                              - operator
-                                                              type: object
-                                                            type: array
-                                                          matchLabels:
-                                                            additionalProperties:
-                                                              type: string
-                                                            description: matchLabels
-                                                              is a map of {key,value}
-                                                              pairs. A single {key,value}
-                                                              in the matchLabels map
-                                                              is equivalent to an
-                                                              element of matchExpressions,
-                                                              whose key field is "key",
-                                                              the operator is "In",
-                                                              and the values array
-                                                              contains only "value".
-                                                              The requirements are
-                                                              ANDed.
-                                                            type: object
-                                                        type: object
-                                                        x-kubernetes-map-type: atomic
-                                                      namespaces:
-                                                        description: namespaces specifies
-                                                          a static list of namespace
-                                                          names that the term applies
-                                                          to. The term is applied
-                                                          to the union of the namespaces
-                                                          listed in this field and
-                                                          the ones selected by namespaceSelector.
-                                                          null or empty namespaces
-                                                          list and null namespaceSelector
-                                                          means "this pod's namespace".
-                                                        items:
-                                                          type: string
-                                                        type: array
-                                                      topologyKey:
-                                                        description: This pod should
-                                                          be co-located (affinity)
-                                                          or not co-located (anti-affinity)
-                                                          with the pods matching the
-                                                          labelSelector in the specified
-                                                          namespaces, where co-located
-                                                          is defined as running on
-                                                          a node whose value of the
-                                                          label with key topologyKey
-                                                          matches that of any node
-                                                          on which any of the selected
-                                                          pods is running. Empty topologyKey
-                                                          is not allowed.
-                                                        type: string
-                                                    required:
-                                                    - topologyKey
-                                                    type: object
-                                                  type: array
-                                              type: object
-                                          type: object
-                                        imagePullSecrets:
-                                          description: If specified, the pod's imagePullSecrets
-                                          items:
-                                            description: LocalObjectReference contains
-                                              enough information to let you locate
-                                              the referenced object inside the same
-                                              namespace.
-                                            properties:
-                                              name:
-                                                description: 'Name of the referent.
-                                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                                  TODO: Add other useful fields. apiVersion,
-                                                  kind, uid?'
-                                                type: string
-                                            type: object
-                                            x-kubernetes-map-type: atomic
-                                          type: array
-                                        nodeSelector:
-                                          additionalProperties:
-                                            type: string
-                                          description: 'NodeSelector is a selector
-                                            which must be true for the pod to fit
-                                            on a node. Selector which must match a
-                                            node''s labels for the pod to be scheduled
-                                            on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
-                                          type: object
-                                        priorityClassName:
-                                          description: If specified, the pod's priorityClassName.
-                                          type: string
-                                        serviceAccountName:
-                                          description: If specified, the pod's service
-                                            account
-                                          type: string
-                                        tolerations:
-                                          description: If specified, the pod's tolerations.
-                                          items:
-                                            description: The pod this Toleration is
-                                              attached to tolerates any taint that
-                                              matches the triple <key,value,effect>
-                                              using the matching operator <operator>.
-                                            properties:
-                                              effect:
-                                                description: Effect indicates the
-                                                  taint effect to match. Empty means
-                                                  match all taint effects. When specified,
-                                                  allowed values are NoSchedule, PreferNoSchedule
-                                                  and NoExecute.
-                                                type: string
-                                              key:
-                                                description: Key is the taint key
-                                                  that the toleration applies to.
-                                                  Empty means match all taint keys.
-                                                  If the key is empty, operator must
-                                                  be Exists; this combination means
-                                                  to match all values and all keys.
-                                                type: string
-                                              operator:
-                                                description: Operator represents a
-                                                  key's relationship to the value.
-                                                  Valid operators are Exists and Equal.
-                                                  Defaults to Equal. Exists is equivalent
-                                                  to wildcard for value, so that a
-                                                  pod can tolerate all taints of a
-                                                  particular category.
-                                                type: string
-                                              tolerationSeconds:
-                                                description: TolerationSeconds represents
-                                                  the period of time the toleration
-                                                  (which must be of effect NoExecute,
-                                                  otherwise this field is ignored)
-                                                  tolerates the taint. By default,
-                                                  it is not set, which means tolerate
-                                                  the taint forever (do not evict).
-                                                  Zero and negative values will be
-                                                  treated as 0 (evict immediately)
-                                                  by the system.
-                                                format: int64
-                                                type: integer
-                                              value:
-                                                description: Value is the taint value
-                                                  the toleration matches to. If the
-                                                  operator is Exists, the value should
-                                                  be empty, otherwise just a regular
-                                                  string.
-                                                type: string
-                                            type: object
-                                          type: array
-                                      type: object
-                                  type: object
-                                serviceType:
-                                  description: Optional service type for Kubernetes
-                                    solver service. Supported values are NodePort
-                                    or ClusterIP. If unset, defaults to NodePort.
-                                  type: string
-                              type: object
-                          type: object
-                        selector:
-                          description: Selector selects a set of DNSNames on the Certificate
-                            resource that should be solved using this challenge solver.
-                            If not specified, the solver will be treated as the 'default'
-                            solver with the lowest priority, i.e. if any other solver
-                            has a more specific match, it will be used instead.
-                          properties:
-                            dnsNames:
-                              description: List of DNSNames that this solver will
-                                be used to solve. If specified and a match is found,
-                                a dnsNames selector will take precedence over a dnsZones
-                                selector. If multiple solvers match with the same
-                                dnsNames value, the solver with the most matching
-                                labels in matchLabels will be selected. If neither
-                                has more matches, the solver defined earlier in the
-                                list will be selected.
-                              items:
-                                type: string
-                              type: array
-                            dnsZones:
-                              description: List of DNSZones that this solver will
-                                be used to solve. The most specific DNS zone match
-                                specified here will take precedence over other DNS
-                                zone matches, so a solver specifying sys.example.com
-                                will be selected over one specifying example.com for
-                                the domain www.sys.example.com. If multiple solvers
-                                match with the same dnsZones value, the solver with
-                                the most matching labels in matchLabels will be selected.
-                                If neither has more matches, the solver defined earlier
-                                in the list will be selected.
-                              items:
-                                type: string
-                              type: array
-                            matchLabels:
-                              additionalProperties:
-                                type: string
-                              description: A label selector that is used to refine
-                                the set of certificate's that this challenge solver
-                                will apply to.
-                              type: object
-                          type: object
-                      type: object
-                    type: array
-                required:
-                - privateKeySecretRef
-                - server
-                type: object
-              ca:
-                description: CA configures this issuer to sign certificates using
-                  a signing CA keypair stored in a Secret resource. This is used to
-                  build internal PKIs that are managed by cert-manager.
-                properties:
-                  crlDistributionPoints:
-                    description: The CRL distribution points is an X.509 v3 certificate
-                      extension which identifies the location of the CRL from which
-                      the revocation of this certificate can be checked. If not set,
-                      certificates will be issued without distribution points set.
-                    items:
-                      type: string
-                    type: array
-                  ocspServers:
-                    description: The OCSP server list is an X.509 v3 extension that
-                      defines a list of URLs of OCSP responders. The OCSP responders
-                      can be queried for the revocation status of an issued certificate.
-                      If not set, the certificate will be issued with no OCSP servers
-                      set. For example, an OCSP server URL could be "http://ocsp.int-x3.letsencrypt.org".
-                    items:
-                      type: string
-                    type: array
-                  secretName:
-                    description: SecretName is the name of the secret used to sign
-                      Certificates issued by this Issuer.
-                    type: string
-                required:
-                - secretName
-                type: object
-              selfSigned:
-                description: SelfSigned configures this issuer to 'self sign' certificates
-                  using the private key used to create the CertificateRequest object.
-                properties:
-                  crlDistributionPoints:
-                    description: The CRL distribution points is an X.509 v3 certificate
-                      extension which identifies the location of the CRL from which
-                      the revocation of this certificate can be checked. If not set
-                      certificate will be issued without CDP. Values are strings.
-                    items:
-                      type: string
-                    type: array
-                type: object
-              vault:
-                description: Vault configures this issuer to sign certificates using
-                  a HashiCorp Vault PKI backend.
-                properties:
-                  auth:
-                    description: Auth configures how cert-manager authenticates with
-                      the Vault server.
-                    properties:
-                      appRole:
-                        description: AppRole authenticates with Vault using the App
-                          Role auth mechanism, with the role and secret stored in
-                          a Kubernetes Secret resource.
-                        properties:
-                          path:
-                            description: 'Path where the App Role authentication backend
-                              is mounted in Vault, e.g: "approle"'
-                            type: string
-                          roleId:
-                            description: RoleID configured in the App Role authentication
-                              backend when setting up the authentication backend in
-                              Vault.
-                            type: string
-                          secretRef:
-                            description: Reference to a key in a Secret that contains
-                              the App Role secret used to authenticate with Vault.
-                              The `key` field must be specified and denotes which
-                              entry within the Secret resource is used as the app
-                              role secret.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - path
-                        - roleId
-                        - secretRef
-                        type: object
-                      kubernetes:
-                        description: Kubernetes authenticates with Vault by passing
-                          the ServiceAccount token stored in the named Secret resource
-                          to the Vault server.
-                        properties:
-                          mountPath:
-                            description: The Vault mountPath here is the mount path
-                              to use when authenticating with Vault. For example,
-                              setting a value to `/v1/auth/foo`, will use the path
-                              `/v1/auth/foo/login` to authenticate with Vault. If
-                              unspecified, the default value "/v1/auth/kubernetes"
-                              will be used.
-                            type: string
-                          role:
-                            description: A required field containing the Vault Role
-                              to assume. A Role binds a Kubernetes ServiceAccount
-                              with a set of Vault policies.
-                            type: string
-                          secretRef:
-                            description: The required Secret field containing a Kubernetes
-                              ServiceAccount JWT used for authenticating with Vault.
-                              Use of 'ambient credentials' is not supported.
-                            properties:
-                              key:
-                                description: The key of the entry in the Secret resource's
-                                  `data` field to be used. Some instances of this
-                                  field may be defaulted, in others it may be required.
-                                type: string
-                              name:
-                                description: 'Name of the resource being referred
-                                  to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          serviceAccountRef:
-                            description: A reference to a service account that will
-                              be used to request a bound token (also known as "projected
-                              token"). Compared to using "secretRef", using this field
-                              means that you don't rely on statically bound tokens.
-                              To use this field, you must configure an RBAC rule to
-                              let cert-manager request a token.
-                            properties:
-                              name:
-                                description: Name of the ServiceAccount used to request
-                                  a token.
-                                type: string
-                            required:
-                            - name
-                            type: object
-                        required:
-                        - role
-                        type: object
-                      tokenSecretRef:
-                        description: TokenSecretRef authenticates with Vault by presenting
-                          a token.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                    type: object
-                  caBundle:
-                    description: Base64-encoded bundle of PEM CAs which will be used
-                      to validate the certificate chain presented by Vault. Only used
-                      if using HTTPS to connect to Vault and ignored for HTTP connections.
-                      Mutually exclusive with CABundleSecretRef. If neither CABundle
-                      nor CABundleSecretRef are defined, the certificate bundle in
-                      the cert-manager controller container is used to validate the
-                      TLS connection.
-                    format: byte
-                    type: string
-                  caBundleSecretRef:
-                    description: Reference to a Secret containing a bundle of PEM-encoded
-                      CAs to use when verifying the certificate chain presented by
-                      Vault when using HTTPS. Mutually exclusive with CABundle. If
-                      neither CABundle nor CABundleSecretRef are defined, the certificate
-                      bundle in the cert-manager controller container is used to validate
-                      the TLS connection. If no key for the Secret is specified, cert-manager
-                      will default to 'ca.crt'.
-                    properties:
-                      key:
-                        description: The key of the entry in the Secret resource's
-                          `data` field to be used. Some instances of this field may
-                          be defaulted, in others it may be required.
-                        type: string
-                      name:
-                        description: 'Name of the resource being referred to. More
-                          info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                        type: string
-                    required:
-                    - name
-                    type: object
-                  namespace:
-                    description: 'Name of the vault namespace. Namespaces is a set
-                      of features within Vault Enterprise that allows Vault environments
-                      to support Secure Multi-tenancy. e.g: "ns1" More about namespaces
-                      can be found here https://www.vaultproject.io/docs/enterprise/namespaces'
-                    type: string
-                  path:
-                    description: 'Path is the mount path of the Vault PKI backend''s
-                      `sign` endpoint, e.g: "my_pki_mount/sign/my-role-name".'
-                    type: string
-                  server:
-                    description: 'Server is the connection address for the Vault server,
-                      e.g: "https://vault.example.com:8200".'
-                    type: string
-                required:
-                - auth
-                - path
-                - server
-                type: object
-              venafi:
-                description: Venafi configures this issuer to sign certificates using
-                  a Venafi TPP or Venafi Cloud policy zone.
-                properties:
-                  cloud:
-                    description: Cloud specifies the Venafi cloud configuration settings.
-                      Only one of TPP or Cloud may be specified.
-                    properties:
-                      apiTokenSecretRef:
-                        description: APITokenSecretRef is a secret key selector for
-                          the Venafi Cloud API token.
-                        properties:
-                          key:
-                            description: The key of the entry in the Secret resource's
-                              `data` field to be used. Some instances of this field
-                              may be defaulted, in others it may be required.
-                            type: string
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                      url:
-                        description: URL is the base URL for Venafi Cloud. Defaults
-                          to "https://api.venafi.cloud/v1".
-                        type: string
-                    required:
-                    - apiTokenSecretRef
-                    type: object
-                  tpp:
-                    description: TPP specifies Trust Protection Platform configuration
-                      settings. Only one of TPP or Cloud may be specified.
-                    properties:
-                      caBundle:
-                        description: Base64-encoded bundle of PEM CAs which will be
-                          used to validate the certificate chain presented by the
-                          TPP server. Only used if using HTTPS; ignored for HTTP.
-                          If undefined, the certificate bundle in the cert-manager
-                          controller container is used to validate the chain.
-                        format: byte
-                        type: string
-                      credentialsRef:
-                        description: CredentialsRef is a reference to a Secret containing
-                          the username and password for the TPP server. The secret
-                          must contain two keys, 'username' and 'password'.
-                        properties:
-                          name:
-                            description: 'Name of the resource being referred to.
-                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                            type: string
-                        required:
-                        - name
-                        type: object
-                      url:
-                        description: 'URL is the base URL for the vedsdk endpoint
-                          of the Venafi TPP instance, for example: "https://tpp.example.com/vedsdk".'
-                        type: string
-                    required:
-                    - credentialsRef
-                    - url
-                    type: object
-                  zone:
-                    description: Zone is the Venafi Policy Zone to use for this issuer.
-                      All requests made to the Venafi platform will be restricted
-                      by the named zone policy. This field is required.
-                    type: string
-                required:
-                - zone
-                type: object
-            type: object
-          status:
-            description: Status of the Issuer. This is set and managed automatically.
-            properties:
-              acme:
-                description: ACME specific status options. This field should only
-                  be set if the Issuer is configured to use an ACME server to issue
-                  certificates.
-                properties:
-                  lastPrivateKeyHash:
-                    description: LastPrivateKeyHash is a hash of the private key associated
-                      with the latest registered ACME account, in order to track changes
-                      made to registered account associated with the Issuer
-                    type: string
-                  lastRegisteredEmail:
-                    description: LastRegisteredEmail is the email associated with
-                      the latest registered ACME account, in order to track changes
-                      made to registered account associated with the  Issuer
-                    type: string
-                  uri:
-                    description: URI is the unique account identifier, which can also
-                      be used to retrieve account details from the CA
-                    type: string
-                type: object
-              conditions:
-                description: List of status conditions to indicate the status of a
-                  CertificateRequest. Known condition types are `Ready`.
-                items:
-                  description: IssuerCondition contains condition information for
-                    an Issuer.
-                  properties:
-                    lastTransitionTime:
-                      description: LastTransitionTime is the timestamp corresponding
-                        to the last status change of this condition.
-                      format: date-time
-                      type: string
-                    message:
-                      description: Message is a human readable description of the
-                        details of the last transition, complementing reason.
-                      type: string
-                    observedGeneration:
-                      description: If set, this represents the .metadata.generation
-                        that the condition was set based upon. For instance, if .metadata.generation
-                        is currently 12, but the .status.condition[x].observedGeneration
-                        is 9, the condition is out of date with respect to the current
-                        state of the Issuer.
-                      format: int64
-                      type: integer
-                    reason:
-                      description: Reason is a brief machine readable explanation
-                        for the condition's last transition.
-                      type: string
-                    status:
-                      description: Status of the condition, one of (`True`, `False`,
-                        `Unknown`).
-                      enum:
-                      - "True"
-                      - "False"
-                      - Unknown
-                      type: string
-                    type:
-                      description: Type of the condition, known values are (`Ready`).
-                      type: string
-                  required:
-                  - status
-                  - type
-                  type: object
-                type: array
-                x-kubernetes-list-map-keys:
-                - type
-                x-kubernetes-list-type: map
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: orders.acme.cert-manager.io
-spec:
-  group: acme.cert-manager.io
-  names:
-    categories:
-    - cert-manager
-    - cert-manager-acme
-    kind: Order
-    listKind: OrderList
-    plural: orders
-    singular: order
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .status.state
-      name: State
-      type: string
-    - jsonPath: .spec.issuerRef.name
-      name: Issuer
-      priority: 1
-      type: string
-    - jsonPath: .status.reason
-      name: Reason
-      priority: 1
-      type: string
-    - description: CreationTimestamp is a timestamp representing the server time when
-        this object was created. It is not guaranteed to be set in happens-before
-        order across separate operations. Clients may not set this value. It is represented
-        in RFC3339 form and is in UTC.
-      jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: Order is a type to represent an Order with an ACME server
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            properties:
-              commonName:
-                description: CommonName is the common name as specified on the DER
-                  encoded CSR. If specified, this value must also be present in `dnsNames`
-                  or `ipAddresses`. This field must match the corresponding field
-                  on the DER encoded CSR.
-                type: string
-              dnsNames:
-                description: DNSNames is a list of DNS names that should be included
-                  as part of the Order validation process. This field must match the
-                  corresponding field on the DER encoded CSR.
-                items:
-                  type: string
-                type: array
-              duration:
-                description: Duration is the duration for the not after date for the
-                  requested certificate. this is set on order creation as pe the ACME
-                  spec.
-                type: string
-              ipAddresses:
-                description: IPAddresses is a list of IP addresses that should be
-                  included as part of the Order validation process. This field must
-                  match the corresponding field on the DER encoded CSR.
-                items:
-                  type: string
-                type: array
-              issuerRef:
-                description: IssuerRef references a properly configured ACME-type
-                  Issuer which should be used to create this Order. If the Issuer
-                  does not exist, processing will be retried. If the Issuer is not
-                  an 'ACME' Issuer, an error will be returned and the Order will be
-                  marked as failed.
-                properties:
-                  group:
-                    description: Group of the resource being referred to.
-                    type: string
-                  kind:
-                    description: Kind of the resource being referred to.
-                    type: string
-                  name:
-                    description: Name of the resource being referred to.
-                    type: string
-                required:
-                - name
-                type: object
-              request:
-                description: Certificate signing request bytes in DER encoding. This
-                  will be used when finalizing the order. This field must be set on
-                  the order.
-                format: byte
-                type: string
-            required:
-            - issuerRef
-            - request
-            type: object
-          status:
-            properties:
-              authorizations:
-                description: Authorizations contains data returned from the ACME server
-                  on what authorizations must be completed in order to validate the
-                  DNS names specified on the Order.
-                items:
-                  description: ACMEAuthorization contains data returned from the ACME
-                    server on an authorization that must be completed in order validate
-                    a DNS name on an ACME Order resource.
-                  properties:
-                    challenges:
-                      description: Challenges specifies the challenge types offered
-                        by the ACME server. One of these challenge types will be selected
-                        when validating the DNS name and an appropriate Challenge
-                        resource will be created to perform the ACME challenge process.
-                      items:
-                        description: Challenge specifies a challenge offered by the
-                          ACME server for an Order. An appropriate Challenge resource
-                          can be created to perform the ACME challenge process.
-                        properties:
-                          token:
-                            description: Token is the token that must be presented
-                              for this challenge. This is used to compute the 'key'
-                              that must also be presented.
-                            type: string
-                          type:
-                            description: Type is the type of challenge being offered,
-                              e.g. 'http-01', 'dns-01', 'tls-sni-01', etc. This is
-                              the raw value retrieved from the ACME server. Only 'http-01'
-                              and 'dns-01' are supported by cert-manager, other values
-                              will be ignored.
-                            type: string
-                          url:
-                            description: URL is the URL of this challenge. It can
-                              be used to retrieve additional metadata about the Challenge
-                              from the ACME server.
-                            type: string
-                        required:
-                        - token
-                        - type
-                        - url
-                        type: object
-                      type: array
-                    identifier:
-                      description: Identifier is the DNS name to be validated as part
-                        of this authorization
-                      type: string
-                    initialState:
-                      description: InitialState is the initial state of the ACME authorization
-                        when first fetched from the ACME server. If an Authorization
-                        is already 'valid', the Order controller will not create a
-                        Challenge resource for the authorization. This will occur
-                        when working with an ACME server that enables 'authz reuse'
-                        (such as Let's Encrypt's production endpoint). If not set
-                        and 'identifier' is set, the state is assumed to be pending
-                        and a Challenge will be created.
-                      enum:
-                      - valid
-                      - ready
-                      - pending
-                      - processing
-                      - invalid
-                      - expired
-                      - errored
-                      type: string
-                    url:
-                      description: URL is the URL of the Authorization that must be
-                        completed
-                      type: string
-                    wildcard:
-                      description: Wildcard will be true if this authorization is
-                        for a wildcard DNS name. If this is true, the identifier will
-                        be the *non-wildcard* version of the DNS name. For example,
-                        if '*.example.com' is the DNS name being validated, this field
-                        will be 'true' and the 'identifier' field will be 'example.com'.
-                      type: boolean
-                  required:
-                  - url
-                  type: object
-                type: array
-              certificate:
-                description: Certificate is a copy of the PEM encoded certificate
-                  for this Order. This field will be populated after the order has
-                  been successfully finalized with the ACME server, and the order
-                  has transitioned to the 'valid' state.
-                format: byte
-                type: string
-              failureTime:
-                description: FailureTime stores the time that this order failed. This
-                  is used to influence garbage collection and back-off.
-                format: date-time
-                type: string
-              finalizeURL:
-                description: FinalizeURL of the Order. This is used to obtain certificates
-                  for this order once it has been completed.
-                type: string
-              reason:
-                description: Reason optionally provides more information about a why
-                  the order is in the current state.
-                type: string
-              state:
-                description: State contains the current state of this Order resource.
-                  States 'success' and 'expired' are 'final'
-                enum:
-                - valid
-                - ready
-                - pending
-                - processing
-                - invalid
-                - expired
-                - errored
-                type: string
-              url:
-                description: URL of the Order. This will initially be empty when the
-                  resource is first created. The Order controller will populate this
-                  field when the Order is first processed. This field will be immutable
-                  after it is initially set.
-                type: string
-            type: object
-        required:
-        - metadata
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: v1
-automountServiceAccountToken: true
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cainjector
-    app.kubernetes.io/component: cainjector
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-cainjector
-  namespace: kube-system
-
----
-
-apiVersion: v1
-automountServiceAccountToken: true
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: v1
-automountServiceAccountToken: true
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook
-  namespace: kube-system
-
----
-
-apiVersion: v1
-data: null
-kind: ConfigMap
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cainjector
-    app.kubernetes.io/component: cainjector
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-cainjector
-rules:
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - get
-  - create
-  - update
-  - patch
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - validatingwebhookconfigurations
-  - mutatingwebhookconfigurations
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - apiregistration.k8s.io
-  resources:
-  - apiservices
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-issuers
-rules:
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - issuers
-  - issuers/status
-  verbs:
-  - update
-  - patch
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - issuers
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-clusterissuers
-rules:
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - clusterissuers
-  - clusterissuers/status
-  verbs:
-  - update
-  - patch
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - clusterissuers
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-certificates
-rules:
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates
-  - certificates/status
-  - certificaterequests
-  - certificaterequests/status
-  verbs:
-  - update
-  - patch
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates
-  - certificaterequests
-  - clusterissuers
-  - issuers
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates/finalizers
-  - certificaterequests/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - orders
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-orders
-rules:
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - orders
-  - orders/status
-  verbs:
-  - update
-  - patch
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - orders
-  - challenges
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - clusterissuers
-  - issuers
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - challenges
-  verbs:
-  - create
-  - delete
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - orders/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-challenges
-rules:
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - challenges
-  - challenges/status
-  verbs:
-  - update
-  - patch
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - challenges
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - issuers
-  - clusterissuers
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  - services
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-  - update
-- apiGroups:
-  - gateway.networking.k8s.io
-  resources:
-  - httproutes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-  - update
-- apiGroups:
-  - route.openshift.io
-  resources:
-  - routes/custom-host
-  verbs:
-  - create
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - challenges/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-ingress-shim
-rules:
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates
-  - certificaterequests
-  verbs:
-  - create
-  - update
-  - delete
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates
-  - certificaterequests
-  - issuers
-  - clusterissuers
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - gateway.networking.k8s.io
-  resources:
-  - gateways
-  - httproutes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - gateway.networking.k8s.io
-  resources:
-  - gateways/finalizers
-  - httproutes/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-    rbac.authorization.k8s.io/aggregate-to-admin: "true"
-    rbac.authorization.k8s.io/aggregate-to-edit: "true"
-    rbac.authorization.k8s.io/aggregate-to-view: "true"
-  name: cert-manager-view
-rules:
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates
-  - certificaterequests
-  - issuers
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - challenges
-  - orders
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-    rbac.authorization.k8s.io/aggregate-to-admin: "true"
-    rbac.authorization.k8s.io/aggregate-to-edit: "true"
-  name: cert-manager-edit
-rules:
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates
-  - certificaterequests
-  - issuers
-  verbs:
-  - create
-  - delete
-  - deletecollection
-  - patch
-  - update
-- apiGroups:
-  - cert-manager.io
-  resources:
-  - certificates/status
-  verbs:
-  - update
-- apiGroups:
-  - acme.cert-manager.io
-  resources:
-  - challenges
-  - orders
-  verbs:
-  - create
-  - delete
-  - deletecollection
-  - patch
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-approve:cert-manager-io
-rules:
-- apiGroups:
-  - cert-manager.io
-  resourceNames:
-  - issuers.cert-manager.io/*
-  - clusterissuers.cert-manager.io/*
-  resources:
-  - signers
-  verbs:
-  - approve
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-certificatesigningrequests
-rules:
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests/status
-  verbs:
-  - update
-  - patch
-- apiGroups:
-  - certificates.k8s.io
-  resourceNames:
-  - issuers.cert-manager.io/*
-  - clusterissuers.cert-manager.io/*
-  resources:
-  - signers
-  verbs:
-  - sign
-- apiGroups:
-  - authorization.k8s.io
-  resources:
-  - subjectaccessreviews
-  verbs:
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook:subjectaccessreviews
-rules:
-- apiGroups:
-  - authorization.k8s.io
-  resources:
-  - subjectaccessreviews
-  verbs:
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cainjector
-    app.kubernetes.io/component: cainjector
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-cainjector
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-cainjector
-subjects:
-- kind: ServiceAccount
-  name: cert-manager-cainjector
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-issuers
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-issuers
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-clusterissuers
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-clusterissuers
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-certificates
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-certificates
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-orders
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-orders
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-challenges
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-challenges
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-ingress-shim
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-ingress-shim
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-approve:cert-manager-io
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-approve:cert-manager-io
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: cert-manager
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-controller-certificatesigningrequests
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-controller-certificatesigningrequests
-subjects:
-- kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook:subjectaccessreviews
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cert-manager-webhook:subjectaccessreviews
-subjects:
-- apiGroup: ""
-  kind: ServiceAccount
-  name: cert-manager-webhook
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cainjector
-    app.kubernetes.io/component: cainjector
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-cainjector:leaderelection
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cert-manager-cainjector-leader-election
-  - cert-manager-cainjector-leader-election-core
-  resources:
-  - leases
-  verbs:
-  - get
-  - update
-  - patch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager:leaderelection
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cert-manager-controller
-  resources:
-  - leases
-  verbs:
-  - get
-  - update
-  - patch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook:dynamic-serving
-  namespace: kube-system
-rules:
-- apiGroups:
-  - ""
-  resourceNames:
-  - cert-manager-webhook-ca
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cainjector
-    app.kubernetes.io/component: cainjector
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-cainjector:leaderelection
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cert-manager-cainjector:leaderelection
-subjects:
-- kind: ServiceAccount
-  name: cert-manager-cainjector
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager:leaderelection
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cert-manager:leaderelection
-subjects:
-- apiGroup: ""
-  kind: ServiceAccount
-  name: cert-manager
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook:dynamic-serving
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cert-manager-webhook:dynamic-serving
-subjects:
-- apiGroup: ""
-  kind: ServiceAccount
-  name: cert-manager-webhook
-  namespace: kube-system
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager
-  namespace: kube-system
-spec:
-  ports:
-  - name: tcp-prometheus-servicemonitor
-    port: 9402
-    protocol: TCP
-    targetPort: 9402
-  selector:
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/name: cert-manager
-  type: ClusterIP
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook
-  namespace: kube-system
-spec:
-  ports:
-  - name: https
-    port: 443
-    protocol: TCP
-    targetPort: https
-  selector:
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/name: webhook
-  type: ClusterIP
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cainjector
-    app.kubernetes.io/component: cainjector
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-cainjector
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: cainjector
-      app.kubernetes.io/instance: cert-manager
-      app.kubernetes.io/name: cainjector
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app: cainjector
-        app.kubernetes.io/component: cainjector
-        app.kubernetes.io/instance: cert-manager
-        app.kubernetes.io/name: cainjector
-        app.kubernetes.io/version: v1.12.10
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: node-role.kubernetes.io/control-plane
-                operator: Exists
-            - matchExpressions:
-              - key: node-role.kubernetes.io/master
-                operator: Exists
-      containers:
-      - args:
-        - --v=2
-        - --leader-election-namespace=kube-system
-        env:
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: quay.io/jetstack/cert-manager-cainjector:v1.12.10
-        imagePullPolicy: IfNotPresent
-        name: cert-manager-cainjector
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-      nodeSelector: null
-      priorityClassName: system-cluster-critical
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      serviceAccountName: cert-manager-cainjector
-      tolerations:
-      - key: node-role.kubernetes.io/control-plane
-        operator: Exists
-      - key: node-role.kubernetes.io/master
-        operator: Exists
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: cert-manager
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: controller
-      app.kubernetes.io/instance: cert-manager
-      app.kubernetes.io/name: cert-manager
-  template:
-    metadata:
-      annotations:
-        prometheus.io/path: /metrics
-        prometheus.io/port: "9402"
-        prometheus.io/scrape: "true"
-      creationTimestamp: null
-      labels:
-        app: cert-manager
-        app.kubernetes.io/component: controller
-        app.kubernetes.io/instance: cert-manager
-        app.kubernetes.io/name: cert-manager
-        app.kubernetes.io/version: v1.12.10
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: node-role.kubernetes.io/control-plane
-                operator: Exists
-            - matchExpressions:
-              - key: node-role.kubernetes.io/master
-                operator: Exists
-      containers:
-      - args:
-        - --v=2
-        - --cluster-resource-namespace=$(POD_NAMESPACE)
-        - --leader-election-namespace=kube-system
-        - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.12.10
-        - --max-concurrent-challenges=60
-        - --enable-certificate-owner-ref=true
-        env:
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: quay.io/jetstack/cert-manager-controller:v1.12.10
-        imagePullPolicy: IfNotPresent
-        name: cert-manager-controller
-        ports:
-        - containerPort: 9402
-          name: http-metrics
-          protocol: TCP
-        - containerPort: 9403
-          name: http-healthz
-          protocol: TCP
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-      nodeSelector: null
-      priorityClassName: system-cluster-critical
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      serviceAccountName: cert-manager
-      tolerations:
-      - key: node-role.kubernetes.io/control-plane
-        operator: Exists
-      - key: node-role.kubernetes.io/master
-        operator: Exists
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: webhook
-      app.kubernetes.io/instance: cert-manager
-      app.kubernetes.io/name: webhook
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app: webhook
-        app.kubernetes.io/component: webhook
-        app.kubernetes.io/instance: cert-manager
-        app.kubernetes.io/name: webhook
-        app.kubernetes.io/version: v1.12.10
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: node-role.kubernetes.io/control-plane
-                operator: Exists
-            - matchExpressions:
-              - key: node-role.kubernetes.io/master
-                operator: Exists
-      containers:
-      - args:
-        - --v=2
-        - --secure-port=10250
-        - --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)
-        - --dynamic-serving-ca-secret-name=cert-manager-webhook-ca
-        - --dynamic-serving-dns-names=cert-manager-webhook
-        - --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)
-        - --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc
-        env:
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: quay.io/jetstack/cert-manager-webhook:v1.12.10
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /livez
-            port: 6080
-            scheme: HTTP
-          initialDelaySeconds: 60
-          periodSeconds: 10
-          successThreshold: 1
-          timeoutSeconds: 1
-        name: cert-manager-webhook
-        ports:
-        - containerPort: 10250
-          name: https
-          protocol: TCP
-        - containerPort: 6080
-          name: healthcheck
-          protocol: TCP
-        readinessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /healthz
-            port: 6080
-            scheme: HTTP
-          initialDelaySeconds: 5
-          periodSeconds: 5
-          successThreshold: 1
-          timeoutSeconds: 1
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-      nodeSelector: null
-      priorityClassName: system-cluster-critical
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      serviceAccountName: cert-manager-webhook
-      tolerations:
-      - key: node-role.kubernetes.io/control-plane
-        operator: Exists
-      - key: node-role.kubernetes.io/master
-        operator: Exists
-
----
-
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
-  annotations:
-    cert-manager.io/inject-ca-from-secret: kube-system/cert-manager-webhook-ca
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook
-webhooks:
-- admissionReviewVersions:
-  - v1
-  clientConfig:
-    service:
-      name: cert-manager-webhook
-      namespace: kube-system
-      path: /mutate
-  failurePolicy: Fail
-  matchPolicy: Equivalent
-  name: webhook.cert-manager.io
-  rules:
-  - apiGroups:
-    - cert-manager.io
-    - acme.cert-manager.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - '*/*'
-  sideEffects: None
-  timeoutSeconds: 10
-
----
-
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  annotations:
-    cert-manager.io/inject-ca-from-secret: kube-system/cert-manager-webhook-ca
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: certmanager.io
-    app: webhook
-    app.kubernetes.io/component: webhook
-    app.kubernetes.io/instance: cert-manager
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.12.10
-  name: cert-manager-webhook
-webhooks:
-- admissionReviewVersions:
-  - v1
-  clientConfig:
-    service:
-      name: cert-manager-webhook
-      namespace: kube-system
-      path: /validate
-  failurePolicy: Fail
-  matchPolicy: Equivalent
-  name: webhook.cert-manager.io
-  namespaceSelector:
-    matchExpressions:
-    - key: cert-manager.io/disable-validation
-      operator: NotIn
-      values:
-      - "true"
-  rules:
-  - apiGroups:
-    - cert-manager.io
-    - acme.cert-manager.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - '*/*'
-  sideEffects: None
-  timeoutSeconds: 10
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-cluster-autoscaler.addons.k8s.io-k8s-1.15_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-cluster-autoscaler.addons.k8s.io-k8s-1.15_content
deleted file mode 100644
index 44309ee2c0cb8..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-cluster-autoscaler.addons.k8s.io-k8s-1.15_content
+++ /dev/null
@@ -1,398 +0,0 @@
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-  namespace: kube-system
-spec:
-  maxUnavailable: 1
-  selector:
-    matchLabels:
-      k8s-app: cluster-autoscaler
-
----
-
-apiVersion: v1
-automountServiceAccountToken: true
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - events
-  - endpoints
-  verbs:
-  - create
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - pods/eviction
-  verbs:
-  - create
-- apiGroups:
-  - ""
-  resources:
-  - pods/status
-  verbs:
-  - update
-- apiGroups:
-  - ""
-  resourceNames:
-  - cluster-autoscaler
-  resources:
-  - endpoints
-  verbs:
-  - get
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - watch
-  - list
-  - get
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - namespaces
-  - pods
-  - services
-  - replicationcontrollers
-  - persistentvolumeclaims
-  - persistentvolumes
-  verbs:
-  - watch
-  - list
-  - get
-- apiGroups:
-  - batch
-  resources:
-  - jobs
-  - cronjobs
-  verbs:
-  - watch
-  - list
-  - get
-- apiGroups:
-  - batch
-  - extensions
-  resources:
-  - jobs
-  verbs:
-  - get
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - extensions
-  resources:
-  - replicasets
-  - daemonsets
-  verbs:
-  - watch
-  - list
-  - get
-- apiGroups:
-  - policy
-  resources:
-  - poddisruptionbudgets
-  verbs:
-  - watch
-  - list
-- apiGroups:
-  - apps
-  resources:
-  - daemonsets
-  - replicasets
-  - statefulsets
-  verbs:
-  - watch
-  - list
-  - get
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  - csinodes
-  - csidrivers
-  - csistoragecapacities
-  verbs:
-  - watch
-  - list
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cluster-autoscaler
-  resources:
-  - leases
-  verbs:
-  - get
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-autoscaler
-subjects:
-- kind: ServiceAccount
-  name: cluster-autoscaler
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-  namespace: kube-system
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  verbs:
-  - create
-- apiGroups:
-  - ""
-  resourceNames:
-  - cluster-autoscaler-status
-  resources:
-  - configmaps
-  verbs:
-  - delete
-  - get
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cluster-autoscaler
-subjects:
-- kind: ServiceAccount
-  name: cluster-autoscaler
-  namespace: kube-system
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-  namespace: kube-system
-spec:
-  ports:
-  - name: http
-    port: 8085
-    protocol: TCP
-    targetPort: 8085
-  selector:
-    app.kubernetes.io/name: cluster-autoscaler
-  type: ClusterIP
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: cluster-autoscaler.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: cluster-autoscaler
-    k8s-addon: cluster-autoscaler.addons.k8s.io
-    k8s-app: cluster-autoscaler
-  name: cluster-autoscaler
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: cluster-autoscaler
-  template:
-    metadata:
-      annotations:
-        prometheus.io/port: "8085"
-        prometheus.io/scrape: "true"
-      creationTimestamp: null
-      labels:
-        app: cluster-autoscaler
-        app.kubernetes.io/name: cluster-autoscaler
-        k8s-addon: cluster-autoscaler.addons.k8s.io
-        k8s-app: cluster-autoscaler
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - preference:
-              matchExpressions:
-              - key: node-role.kubernetes.io/spot-worker
-                operator: DoesNotExist
-            weight: 1
-      containers:
-      - command:
-        - ./cluster-autoscaler
-        - --balance-similar-node-groups=false
-        - --cloud-provider=aws
-        - --aws-use-static-instance-list=false
-        - --expander=random
-        - --nodes=2:2:nodes.minimal.example.com
-        - --ignore-daemonsets-utilization=false
-        - --scale-down-utilization-threshold=0.5
-        - --skip-nodes-with-local-storage=true
-        - --skip-nodes-with-system-pods=true
-        - --scale-down-delay-after-add=10m0s
-        - --scale-down-unneeded-time=10m0s
-        - --scale-down-unready-time=20m0s
-        - --new-pod-scale-up-delay=0s
-        - --max-node-provision-time=15m0s
-        - --cordon-node-before-terminating=true
-        - --logtostderr=true
-        - --stderrthreshold=info
-        - --v=4
-        env:
-        - name: AWS_REGION
-          value: us-test-1
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/cluster-autoscaler.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/autoscaling/cluster-autoscaler:v1.24.3
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /health-check
-            port: http
-            scheme: HTTP
-          periodSeconds: 10
-          successThreshold: 1
-          timeoutSeconds: 1
-        name: cluster-autoscaler
-        ports:
-        - containerPort: 8085
-          name: http
-          protocol: TCP
-        resources:
-          requests:
-            cpu: 100m
-            memory: 300Mi
-        volumeMounts:
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      dnsPolicy: ClusterFirst
-      priorityClassName: system-cluster-critical
-      securityContext:
-        fsGroup: 10001
-      serviceAccountName: cluster-autoscaler
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            app: cluster-autoscaler
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            app: cluster-autoscaler
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-      volumes:
-      - name: token-amazonaws-com
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              audience: amazonaws.com
-              expirationSeconds: 86400
-              path: token
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
deleted file mode 100644
index 0322368ae45b7..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ /dev/null
@@ -1,155 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: dns-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: dns-controller.addons.k8s.io
-    k8s-app: dns-controller
-    version: v1.29.0-beta.1
-  name: dns-controller
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      k8s-app: dns-controller
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        k8s-addon: dns-controller.addons.k8s.io
-        k8s-app: dns-controller
-        kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: node-role.kubernetes.io/control-plane
-                operator: Exists
-            - matchExpressions:
-              - key: node-role.kubernetes.io/master
-                operator: Exists
-      containers:
-      - args:
-        - --watch-ingress=false
-        - --dns=aws-route53
-        - --zone=*/Z1AFAKE1ZON3YO
-        - --internal-ipv4
-        - --zone=*/*
-        - -v=2
-        env:
-        - name: KUBERNETES_SERVICE_HOST
-          value: 127.0.0.1
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
-        name: dns-controller
-        resources:
-          requests:
-            cpu: 50m
-            memory: 50Mi
-        securityContext:
-          runAsNonRoot: true
-        volumeMounts:
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      dnsPolicy: Default
-      hostNetwork: true
-      priorityClassName: system-cluster-critical
-      securityContext:
-        fsGroup: 10001
-      serviceAccount: dns-controller
-      tolerations:
-      - key: node.cloudprovider.kubernetes.io/uninitialized
-        operator: Exists
-      - key: node.kubernetes.io/not-ready
-        operator: Exists
-      - key: node-role.kubernetes.io/control-plane
-        operator: Exists
-      - key: node-role.kubernetes.io/master
-        operator: Exists
-      volumes:
-      - name: token-amazonaws-com
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              audience: amazonaws.com
-              expirationSeconds: 86400
-              path: token
-
----
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: dns-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: dns-controller.addons.k8s.io
-  name: dns-controller
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: dns-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: dns-controller.addons.k8s.io
-  name: kops:dns-controller
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  - services
-  - pods
-  - ingress
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: dns-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: dns-controller.addons.k8s.io
-  name: kops:dns-controller
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kops:dns-controller
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:serviceaccount:kube-system:dns-controller
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
deleted file mode 100644
index 4974f4fc55d10..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ /dev/null
@@ -1,225 +0,0 @@
-apiVersion: v1
-data:
-  config.yaml: |
-    {"clusterName":"minimal.example.com","cloud":"aws","configBase":"memfs://clusters.example.com/minimal.example.com","secretStore":"memfs://clusters.example.com/minimal.example.com/secrets","server":{"Listen":":3988","provider":{"aws":{"nodesRoles":["nodes.minimal.example.com"],"Region":"us-test-1"}},"serverKeyPath":"/etc/kubernetes/kops-controller/pki/kops-controller.key","serverCertificatePath":"/etc/kubernetes/kops-controller/pki/kops-controller.crt","caBasePath":"/etc/kubernetes/kops-controller/pki","signingCAs":["kubernetes-ca"],"certNames":["kubelet","kubelet-server","kube-proxy"]}}
-kind: ConfigMap
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kops-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kops-controller.addons.k8s.io
-  name: kops-controller
-  namespace: kube-system
-
----
-
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kops-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kops-controller.addons.k8s.io
-    k8s-app: kops-controller
-    version: v1.29.0-beta.1
-  name: kops-controller
-  namespace: kube-system
-spec:
-  selector:
-    matchLabels:
-      k8s-app: kops-controller
-  template:
-    metadata:
-      annotations:
-        dns.alpha.kubernetes.io/internal: kops-controller.internal.minimal.example.com
-      creationTimestamp: null
-      labels:
-        k8s-addon: kops-controller.addons.k8s.io
-        k8s-app: kops-controller
-        kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: node-role.kubernetes.io/control-plane
-                operator: Exists
-              - key: kops.k8s.io/kops-controller-pki
-                operator: Exists
-            - matchExpressions:
-              - key: node-role.kubernetes.io/master
-                operator: Exists
-              - key: kops.k8s.io/kops-controller-pki
-                operator: Exists
-      containers:
-      - args:
-        - --v=2
-        - --conf=/etc/kubernetes/kops-controller/config/config.yaml
-        command: null
-        env:
-        - name: KUBERNETES_SERVICE_HOST
-          value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
-        name: kops-controller
-        resources:
-          requests:
-            cpu: 50m
-            memory: 50Mi
-        securityContext:
-          runAsNonRoot: true
-          runAsUser: 10011
-        volumeMounts:
-        - mountPath: /etc/kubernetes/kops-controller/config/
-          name: kops-controller-config
-        - mountPath: /etc/kubernetes/kops-controller/pki/
-          name: kops-controller-pki
-      dnsPolicy: Default
-      hostNetwork: true
-      nodeSelector: null
-      priorityClassName: system-cluster-critical
-      serviceAccount: kops-controller
-      tolerations:
-      - key: node.cloudprovider.kubernetes.io/uninitialized
-        operator: Exists
-      - key: node.kubernetes.io/not-ready
-        operator: Exists
-      - key: node-role.kubernetes.io/master
-        operator: Exists
-      - key: node-role.kubernetes.io/control-plane
-        operator: Exists
-      volumes:
-      - configMap:
-          name: kops-controller
-        name: kops-controller-config
-      - hostPath:
-          path: /etc/kubernetes/kops-controller/
-          type: Directory
-        name: kops-controller-pki
-  updateStrategy:
-    type: OnDelete
-
----
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kops-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kops-controller.addons.k8s.io
-  name: kops-controller
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kops-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kops-controller.addons.k8s.io
-  name: kops-controller
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kops-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kops-controller.addons.k8s.io
-  name: kops-controller
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kops-controller
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:serviceaccount:kube-system:kops-controller
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kops-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kops-controller.addons.k8s.io
-  name: kops-controller
-  namespace: kube-system
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-- apiGroups:
-  - ""
-  - coordination.k8s.io
-  resourceNames:
-  - kops-controller-leader
-  resources:
-  - configmaps
-  - leases
-  verbs:
-  - get
-  - list
-  - watch
-  - patch
-  - update
-  - delete
-- apiGroups:
-  - ""
-  - coordination.k8s.io
-  resources:
-  - configmaps
-  - leases
-  verbs:
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kops-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kops-controller.addons.k8s.io
-  name: kops-controller
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: kops-controller
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:serviceaccount:kube-system:kops-controller
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
deleted file mode 100644
index 11ed6d46fd241..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
+++ /dev/null
@@ -1,52 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cloud-provider-extraction-migration
-  resources:
-  - leases
-  verbs:
-  - create
-  - list
-  - get
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: system::leader-locking-migration
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:kube-controller-manager
-- kind: ServiceAccount
-  name: kube-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: cloud-controller-manager
-  namespace: kube-system
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-metrics-server.addons.k8s.io-k8s-1.11_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-metrics-server.addons.k8s.io-k8s-1.11_content
deleted file mode 100644
index 658d9975d5dba..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-metrics-server.addons.k8s.io-k8s-1.11_content
+++ /dev/null
@@ -1,276 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: metrics-server
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-    rbac.authorization.k8s.io/aggregate-to-admin: "true"
-    rbac.authorization.k8s.io/aggregate-to-edit: "true"
-    rbac.authorization.k8s.io/aggregate-to-view: "true"
-  name: system:aggregated-metrics-reader
-rules:
-- apiGroups:
-  - metrics.k8s.io
-  resources:
-  - pods
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: system:metrics-server
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes/metrics
-  verbs:
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: metrics-server-auth-reader
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: extension-apiserver-authentication-reader
-subjects:
-- kind: ServiceAccount
-  name: metrics-server
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: metrics-server:system:auth-delegator
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:auth-delegator
-subjects:
-- kind: ServiceAccount
-  name: metrics-server
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: system:metrics-server
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:metrics-server
-subjects:
-- kind: ServiceAccount
-  name: metrics-server
-  namespace: kube-system
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: metrics-server
-  namespace: kube-system
-spec:
-  ports:
-  - name: https
-    port: 443
-    protocol: TCP
-    targetPort: https
-  selector:
-    k8s-app: metrics-server
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: metrics-server
-  namespace: kube-system
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      k8s-app: metrics-server
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        k8s-app: metrics-server
-        kops.k8s.io/managed-by: kops
-    spec:
-      containers:
-      - args:
-        - --secure-port=4443
-        - --kubelet-use-node-status-port
-        - --metric-resolution=15s
-        - --kubelet-preferred-address-types=Hostname
-        - --cert-dir=/tmp
-        - --kubelet-insecure-tls
-        image: registry.k8s.io/metrics-server/metrics-server:v0.7.1
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /livez
-            port: https
-            scheme: HTTPS
-          periodSeconds: 10
-        name: metrics-server
-        ports:
-        - containerPort: 4443
-          name: https
-          protocol: TCP
-        readinessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-          initialDelaySeconds: 20
-          periodSeconds: 10
-        resources:
-          requests:
-            cpu: 100m
-            memory: 200Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsNonRoot: true
-          runAsUser: 1000
-          seccompProfile:
-            type: RuntimeDefault
-        volumeMounts:
-        - mountPath: /tmp
-          name: tmp-dir
-      nodeSelector:
-        kubernetes.io/os: linux
-      priorityClassName: system-cluster-critical
-      serviceAccountName: metrics-server
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            k8s-app: metrics-server
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            k8s-app: metrics-server
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-      volumes:
-      - emptyDir: {}
-        name: tmp-dir
-
----
-
-apiVersion: apiregistration.k8s.io/v1
-kind: APIService
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: v1beta1.metrics.k8s.io
-spec:
-  group: metrics.k8s.io
-  groupPriorityMinimum: 100
-  insecureSkipTLSVerify: true
-  service:
-    name: metrics-server
-    namespace: kube-system
-  version: v1beta1
-  versionPriority: 100
-
----
-
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: metrics-server.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-app: metrics-server
-  name: metrics-server
-  namespace: kube-system
-spec:
-  minAvailable: 1
-  selector:
-    matchLabels:
-      k8s-app: metrics-server
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-networking.amazon-vpc-routed-eni-k8s-1.16_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-networking.amazon-vpc-routed-eni-k8s-1.16_content
deleted file mode 100644
index e66a6852df707..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-networking.amazon-vpc-routed-eni-k8s-1.16_content
+++ /dev/null
@@ -1,638 +0,0 @@
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: networking.amazon-vpc-routed-eni
-    app.kubernetes.io/managed-by: kops
-    role.kubernetes.io/networking: "1"
-  name: eniconfigs.crd.k8s.amazonaws.com
-spec:
-  group: crd.k8s.amazonaws.com
-  names:
-    kind: ENIConfig
-    plural: eniconfigs
-    singular: eniconfig
-  preserveUnknownFields: false
-  scope: Cluster
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    served: true
-    storage: true
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: networking.amazon-vpc-routed-eni
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: amazon-network-policy-controller-k8s
-    role.kubernetes.io/networking: "1"
-  name: policyendpoints.networking.k8s.aws
-spec:
-  group: networking.k8s.aws
-  names:
-    kind: PolicyEndpoint
-    listKind: PolicyEndpointList
-    plural: policyendpoints
-    singular: policyendpoint
-  scope: Namespaced
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: PolicyEndpoint is the Schema for the policyendpoints API
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: PolicyEndpointSpec defines the desired state of PolicyEndpoint
-            properties:
-              egress:
-                description: Egress is the list of egress rules containing resolved
-                  network addresses
-                items:
-                  description: EndpointInfo defines the network endpoint information
-                    for the policy ingress/egress
-                  properties:
-                    cidr:
-                      description: CIDR is the network address(s) of the endpoint
-                      type: string
-                    except:
-                      description: Except is the exceptions to the CIDR ranges mentioned
-                        above.
-                      items:
-                        type: string
-                      type: array
-                    ports:
-                      description: Ports is the list of ports
-                      items:
-                        description: Port contains information about the transport
-                          port/protocol
-                        properties:
-                          endPort:
-                            description: Endport specifies the port range port to
-                              endPort port must be defined and an integer, endPort
-                              > port
-                            format: int32
-                            type: integer
-                          port:
-                            description: Port specifies the numerical port for the
-                              protocol. If empty applies to all ports
-                            format: int32
-                            type: integer
-                          protocol:
-                            default: TCP
-                            description: Protocol specifies the transport protocol,
-                              default TCP
-                            type: string
-                        type: object
-                      type: array
-                  required:
-                  - cidr
-                  type: object
-                type: array
-              ingress:
-                description: Ingress is the list of ingress rules containing resolved
-                  network addresses
-                items:
-                  description: EndpointInfo defines the network endpoint information
-                    for the policy ingress/egress
-                  properties:
-                    cidr:
-                      description: CIDR is the network address(s) of the endpoint
-                      type: string
-                    except:
-                      description: Except is the exceptions to the CIDR ranges mentioned
-                        above.
-                      items:
-                        type: string
-                      type: array
-                    ports:
-                      description: Ports is the list of ports
-                      items:
-                        description: Port contains information about the transport
-                          port/protocol
-                        properties:
-                          endPort:
-                            description: Endport specifies the port range port to
-                              endPort port must be defined and an integer, endPort
-                              > port
-                            format: int32
-                            type: integer
-                          port:
-                            description: Port specifies the numerical port for the
-                              protocol. If empty applies to all ports
-                            format: int32
-                            type: integer
-                          protocol:
-                            default: TCP
-                            description: Protocol specifies the transport protocol,
-                              default TCP
-                            type: string
-                        type: object
-                      type: array
-                  required:
-                  - cidr
-                  type: object
-                type: array
-              podIsolation:
-                description: PodIsolation specifies whether the pod needs to be isolated
-                  for a particular traffic direction Ingress or Egress, or both. If
-                  default isolation is not specified, and there are no ingress/egress
-                  rules, then the pod is not isolated from the point of view of this
-                  policy. This follows the NetworkPolicy spec.PolicyTypes.
-                items:
-                  description: PolicyType string describes the NetworkPolicy type
-                    This type is beta-level in 1.8
-                  type: string
-                type: array
-              podSelector:
-                description: PodSelector is the podSelector from the policy resource
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              podSelectorEndpoints:
-                description: PodSelectorEndpoints contains information about the pods
-                  matching the podSelector
-                items:
-                  description: PodEndpoint defines the summary information for the
-                    pods
-                  properties:
-                    hostIP:
-                      description: HostIP is the IP address of the host the pod is
-                        currently running on
-                      type: string
-                    name:
-                      description: Name is the pod name
-                      type: string
-                    namespace:
-                      description: Namespace is the pod namespace
-                      type: string
-                    podIP:
-                      description: PodIP is the IP address of the pod
-                      type: string
-                  required:
-                  - hostIP
-                  - name
-                  - namespace
-                  - podIP
-                  type: object
-                type: array
-              policyRef:
-                description: PolicyRef is a reference to the Kubernetes NetworkPolicy
-                  resource.
-                properties:
-                  name:
-                    description: Name is the name of the Policy
-                    type: string
-                  namespace:
-                    description: Namespace is the namespace of the Policy
-                    type: string
-                required:
-                - name
-                - namespace
-                type: object
-            required:
-            - policyRef
-            type: object
-          status:
-            description: PolicyEndpointStatus defines the observed state of PolicyEndpoint
-            type: object
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-
----
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: networking.amazon-vpc-routed-eni
-    app.kubernetes.io/instance: aws-vpc-cni
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node
-    app.kubernetes.io/version: v1.18.1
-    k8s-app: aws-node
-    role.kubernetes.io/networking: "1"
-  name: aws-node
-  namespace: kube-system
-
----
-
-apiVersion: v1
-data:
-  branch-eni-cooldown: "60"
-  enable-network-policy-controller: "false"
-  enable-windows-ipam: "false"
-  enable-windows-prefix-delegation: "false"
-  minimum-ip-target: "3"
-  warm-ip-target: "1"
-  warm-prefix-target: "0"
-kind: ConfigMap
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: networking.amazon-vpc-routed-eni
-    app.kubernetes.io/instance: aws-vpc-cni
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node
-    app.kubernetes.io/version: v1.18.1
-    k8s-app: aws-node
-    role.kubernetes.io/networking: "1"
-  name: amazon-vpc-cni
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: networking.amazon-vpc-routed-eni
-    app.kubernetes.io/instance: aws-vpc-cni
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node
-    app.kubernetes.io/version: v1.18.1
-    k8s-app: aws-node
-    role.kubernetes.io/networking: "1"
-  name: aws-node
-rules:
-- apiGroups:
-  - crd.k8s.amazonaws.com
-  resources:
-  - eniconfigs
-  verbs:
-  - list
-  - watch
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - namespaces
-  verbs:
-  - list
-  - watch
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  verbs:
-  - list
-  - watch
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - list
-  - watch
-  - get
-- apiGroups:
-  - ""
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - list
-- apiGroups:
-  - networking.k8s.aws
-  resources:
-  - policyendpoints
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - networking.k8s.aws
-  resources:
-  - policyendpoints/status
-  verbs:
-  - get
-- apiGroups:
-  - vpcresources.k8s.aws
-  resources:
-  - cninodes
-  verbs:
-  - get
-  - list
-  - watch
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: networking.amazon-vpc-routed-eni
-    app.kubernetes.io/instance: aws-vpc-cni
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node
-    app.kubernetes.io/version: v1.18.1
-    k8s-app: aws-node
-    role.kubernetes.io/networking: "1"
-  name: aws-node
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: aws-node
-subjects:
-- kind: ServiceAccount
-  name: aws-node
-  namespace: kube-system
-
----
-
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: networking.amazon-vpc-routed-eni
-    app.kubernetes.io/instance: aws-vpc-cni
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node
-    app.kubernetes.io/version: v1.18.1
-    k8s-app: aws-node
-    role.kubernetes.io/networking: "1"
-  name: aws-node
-  namespace: kube-system
-spec:
-  selector:
-    matchLabels:
-      k8s-app: aws-node
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app.kubernetes.io/instance: aws-vpc-cni
-        app.kubernetes.io/name: aws-node
-        k8s-app: aws-node
-        kops.k8s.io/managed-by: kops
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: kubernetes.io/os
-                operator: In
-                values:
-                - linux
-              - key: kubernetes.io/arch
-                operator: In
-                values:
-                - amd64
-                - arm64
-              - key: eks.amazonaws.com/compute-type
-                operator: NotIn
-                values:
-                - fargate
-      containers:
-      - env:
-        - name: ADDITIONAL_ENI_TAGS
-          value: '{"KubernetesCluster":"minimal.example.com","kubernetes.io/cluster/minimal.example.com":"owned"}'
-        - name: AWS_VPC_CNI_NODE_PORT_SUPPORT
-          value: "true"
-        - name: AWS_VPC_ENI_MTU
-          value: "9001"
-        - name: AWS_VPC_K8S_CNI_CONFIGURE_RPFILTER
-          value: "false"
-        - name: AWS_VPC_K8S_CNI_CUSTOM_NETWORK_CFG
-          value: "false"
-        - name: AWS_VPC_K8S_CNI_EXTERNALSNAT
-          value: "false"
-        - name: AWS_VPC_K8S_CNI_LOGLEVEL
-          value: DEBUG
-        - name: AWS_VPC_K8S_CNI_LOG_FILE
-          value: /host/var/log/aws-routed-eni/ipamd.log
-        - name: AWS_VPC_K8S_CNI_RANDOMIZESNAT
-          value: prng
-        - name: AWS_VPC_K8S_CNI_VETHPREFIX
-          value: eni
-        - name: AWS_VPC_K8S_PLUGIN_LOG_FILE
-          value: /var/log/aws-routed-eni/plugin.log
-        - name: AWS_VPC_K8S_PLUGIN_LOG_LEVEL
-          value: DEBUG
-        - name: DISABLE_INTROSPECTION
-          value: "false"
-        - name: DISABLE_METRICS
-          value: "false"
-        - name: DISABLE_NETWORK_RESOURCE_PROVISIONING
-          value: "false"
-        - name: ENABLE_IPv4
-          value: "true"
-        - name: ENABLE_IPv6
-          value: "false"
-        - name: ENABLE_POD_ENI
-          value: "false"
-        - name: ENABLE_PREFIX_DELEGATION
-          value: "false"
-        - name: WARM_ENI_TARGET
-          value: "1"
-        - name: WARM_PREFIX_TARGET
-          value: "1"
-        - name: MY_NODE_NAME
-          valueFrom:
-            fieldRef:
-              apiVersion: v1
-              fieldPath: spec.nodeName
-        - name: MY_POD_NAME
-          valueFrom:
-            fieldRef:
-              apiVersion: v1
-              fieldPath: metadata.name
-        - name: CLUSTER_NAME
-          value: minimal.example.com
-        image: 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni:v1.18.1
-        livenessProbe:
-          exec:
-            command:
-            - /app/grpc-health-probe
-            - -addr=:50051
-            - -connect-timeout=5s
-            - -rpc-timeout=5s
-          initialDelaySeconds: 60
-          timeoutSeconds: 10
-        name: aws-node
-        ports:
-        - containerPort: 61678
-          name: metrics
-        readinessProbe:
-          exec:
-            command:
-            - /app/grpc-health-probe
-            - -addr=:50051
-            - -connect-timeout=5s
-            - -rpc-timeout=5s
-          initialDelaySeconds: 1
-          timeoutSeconds: 10
-        resources:
-          requests:
-            cpu: 25m
-        securityContext:
-          capabilities:
-            add:
-            - NET_ADMIN
-            - NET_RAW
-        volumeMounts:
-        - mountPath: /host/opt/cni/bin
-          name: cni-bin-dir
-        - mountPath: /host/etc/cni/net.d
-          name: cni-net-dir
-        - mountPath: /host/var/log/aws-routed-eni
-          name: log-dir
-        - mountPath: /var/run/aws-node
-          name: run-dir
-        - mountPath: /run/xtables.lock
-          name: xtables-lock
-      - args:
-        - --enable-ipv6=false
-        - --enable-network-policy=false
-        - --enable-cloudwatch-logs=false
-        - --enable-policy-event-logs=false
-        - --metrics-bind-addr=:8162
-        - --health-probe-bind-addr=:8163
-        - --conntrack-cache-cleanup-period=300
-        env:
-        - name: MY_NODE_NAME
-          valueFrom:
-            fieldRef:
-              apiVersion: v1
-              fieldPath: spec.nodeName
-        image: 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-network-policy-agent:v1.1.1
-        name: aws-eks-nodeagent
-        resources:
-          requests:
-            cpu: 25m
-        securityContext:
-          capabilities:
-            add:
-            - NET_ADMIN
-          privileged: true
-        volumeMounts:
-        - mountPath: /host/opt/cni/bin
-          name: cni-bin-dir
-        - mountPath: /sys/fs/bpf
-          name: bpf-pin-path
-        - mountPath: /var/log/aws-routed-eni
-          name: log-dir
-        - mountPath: /var/run/aws-node
-          name: run-dir
-      hostNetwork: true
-      initContainers:
-      - env:
-        - name: DISABLE_TCP_EARLY_DEMUX
-          value: "false"
-        - name: ENABLE_IPv6
-          value: "false"
-        image: 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni-init:v1.18.1
-        name: aws-vpc-cni-init
-        resources:
-          requests:
-            cpu: 25m
-        securityContext:
-          privileged: true
-        volumeMounts:
-        - mountPath: /host/opt/cni/bin
-          name: cni-bin-dir
-      priorityClassName: system-node-critical
-      serviceAccountName: aws-node
-      terminationGracePeriodSeconds: 10
-      tolerations:
-      - operator: Exists
-      volumes:
-      - hostPath:
-          path: /sys/fs/bpf
-        name: bpf-pin-path
-      - hostPath:
-          path: /opt/cni/bin
-        name: cni-bin-dir
-      - hostPath:
-          path: /etc/cni/net.d
-        name: cni-net-dir
-      - hostPath:
-          path: /var/log/aws-routed-eni
-          type: DirectoryOrCreate
-        name: log-dir
-      - hostPath:
-          path: /var/run/aws-node
-          type: DirectoryOrCreate
-        name: run-dir
-      - hostPath:
-          path: /run/xtables.lock
-        name: xtables-lock
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: 10%
-    type: RollingUpdate
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content
deleted file mode 100644
index ac291e5e9b40a..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content
+++ /dev/null
@@ -1,283 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: node-termination-handler.aws
-    app.kubernetes.io/instance: aws-node-termination-handler
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node-termination-handler
-    app.kubernetes.io/part-of: aws-node-termination-handler
-    app.kubernetes.io/version: v1.18.3
-    k8s-addon: node-termination-handler.aws
-    k8s-app: aws-node-termination-handler
-  name: aws-node-termination-handler
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: node-termination-handler.aws
-    app.kubernetes.io/instance: aws-node-termination-handler
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node-termination-handler
-    app.kubernetes.io/part-of: aws-node-termination-handler
-    app.kubernetes.io/version: v1.18.3
-    k8s-addon: node-termination-handler.aws
-  name: aws-node-termination-handler
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - patch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  verbs:
-  - list
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - pods/eviction
-  verbs:
-  - create
-- apiGroups:
-  - extensions
-  resources:
-  - daemonsets
-  verbs:
-  - get
-- apiGroups:
-  - apps
-  resources:
-  - daemonsets
-  verbs:
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: node-termination-handler.aws
-    app.kubernetes.io/instance: aws-node-termination-handler
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node-termination-handler
-    app.kubernetes.io/part-of: aws-node-termination-handler
-    app.kubernetes.io/version: v1.18.3
-    k8s-addon: node-termination-handler.aws
-  name: aws-node-termination-handler
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: aws-node-termination-handler
-subjects:
-- kind: ServiceAccount
-  name: aws-node-termination-handler
-  namespace: kube-system
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: node-termination-handler.aws
-    app.kubernetes.io/component: deployment
-    app.kubernetes.io/instance: aws-node-termination-handler
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node-termination-handler
-    app.kubernetes.io/part-of: aws-node-termination-handler
-    app.kubernetes.io/version: v1.18.3
-    k8s-addon: node-termination-handler.aws
-    k8s-app: aws-node-termination-handler
-  name: aws-node-termination-handler
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: aws-node-termination-handler
-      app.kubernetes.io/name: aws-node-termination-handler
-      kubernetes.io/os: linux
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app.kubernetes.io/component: deployment
-        app.kubernetes.io/instance: aws-node-termination-handler
-        app.kubernetes.io/name: aws-node-termination-handler
-        k8s-app: aws-node-termination-handler
-        kops.k8s.io/managed-by: kops
-        kops.k8s.io/nth-mode: sqs
-        kubernetes.io/os: linux
-    spec:
-      containers:
-      - env:
-        - name: NODE_NAME
-          valueFrom:
-            fieldRef:
-              fieldPath: spec.nodeName
-        - name: POD_NAME
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.name
-        - name: NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        - name: ENABLE_PROBES_SERVER
-          value: "true"
-        - name: PROBES_SERVER_PORT
-          value: "8080"
-        - name: PROBES_SERVER_ENDPOINT
-          value: /healthz
-        - name: LOG_LEVEL
-          value: info
-        - name: JSON_LOGGING
-          value: "true"
-        - name: LOG_FORMAT_VERSION
-          value: "2"
-        - name: ENABLE_PROMETHEUS_SERVER
-          value: "false"
-        - name: PROMETHEUS_SERVER_PORT
-          value: "9092"
-        - name: CHECK_TAG_BEFORE_DRAINING
-          value: "true"
-        - name: MANAGED_TAG
-          value: aws-node-termination-handler/managed
-        - name: USE_PROVIDER_ID
-          value: "true"
-        - name: DRY_RUN
-          value: "false"
-        - name: CORDON_ONLY
-          value: "false"
-        - name: TAINT_NODE
-          value: "false"
-        - name: EXCLUDE_FROM_LOAD_BALANCERS
-          value: "true"
-        - name: DELETE_LOCAL_DATA
-          value: "true"
-        - name: IGNORE_DAEMON_SETS
-          value: "true"
-        - name: POD_TERMINATION_GRACE_PERIOD
-          value: "-1"
-        - name: NODE_TERMINATION_GRACE_PERIOD
-          value: "120"
-        - name: EMIT_KUBERNETES_EVENTS
-          value: "true"
-        - name: COMPLETE_LIFECYCLE_ACTION_DELAY_SECONDS
-          value: "-1"
-        - name: ENABLE_SQS_TERMINATION_DRAINING
-          value: "true"
-        - name: QUEUE_URL
-          value: https://sqs.us-test-1.amazonaws.com/123456789012/minimal-example-com-nth
-        - name: WORKERS
-          value: "10"
-        - name: AWS_ROLE_ARN
-          value: arn:aws-test:iam::123456789012:role/aws-node-termination-handler.kube-system.sa.minimal.example.com
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.18.3
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          httpGet:
-            path: /healthz
-            port: 8080
-          initialDelaySeconds: 5
-          periodSeconds: 5
-        name: aws-node-termination-handler
-        ports:
-        - containerPort: 8080
-          name: liveness-probe
-          protocol: TCP
-        - containerPort: 9092
-          name: metrics
-          protocol: TCP
-        resources:
-          requests:
-            cpu: 50m
-            memory: 64Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          runAsGroup: 1000
-          runAsNonRoot: true
-          runAsUser: 1000
-        volumeMounts:
-        - mountPath: /var/run/secrets/amazonaws.com/
-          name: token-amazonaws-com
-          readOnly: true
-      priorityClassName: system-cluster-critical
-      securityContext:
-        fsGroup: 1000
-      serviceAccountName: aws-node-termination-handler
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            app.kubernetes.io/instance: aws-node-termination-handler
-            app.kubernetes.io/name: aws-node-termination-handler
-            kops.k8s.io/nth-mode: sqs
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            app.kubernetes.io/instance: aws-node-termination-handler
-            app.kubernetes.io/name: aws-node-termination-handler
-            kops.k8s.io/nth-mode: sqs
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-      volumes:
-      - name: token-amazonaws-com
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              audience: amazonaws.com
-              expirationSeconds: 86400
-              path: token
-
----
-
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: node-termination-handler.aws
-    app.kubernetes.io/instance: aws-node-termination-handler
-    app.kubernetes.io/managed-by: kops
-    app.kubernetes.io/name: aws-node-termination-handler
-    k8s-addon: node-termination-handler.aws
-  name: aws-node-termination-handler
-  namespace: kube-system
-spec:
-  maxUnavailable: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: aws-node-termination-handler
-      app.kubernetes.io/name: aws-node-termination-handler
-      kops.k8s.io/nth-mode: sqs
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-snapshot-controller.addons.k8s.io-k8s-1.20_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-snapshot-controller.addons.k8s.io-k8s-1.20_content
deleted file mode 100644
index f382104015a77..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-snapshot-controller.addons.k8s.io-k8s-1.20_content
+++ /dev/null
@@ -1,1372 +0,0 @@
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-csi/external-snapshotter/pull/419
-    controller-gen.kubebuilder.io/version: v0.4.0
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: volumesnapshotclasses.snapshot.storage.k8s.io
-spec:
-  group: snapshot.storage.k8s.io
-  names:
-    kind: VolumeSnapshotClass
-    listKind: VolumeSnapshotClassList
-    plural: volumesnapshotclasses
-    shortNames:
-    - vsclass
-    - vsclasses
-    singular: volumesnapshotclass
-  scope: Cluster
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .driver
-      name: Driver
-      type: string
-    - description: Determines whether a VolumeSnapshotContent created through the
-        VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted.
-      jsonPath: .deletionPolicy
-      name: DeletionPolicy
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: VolumeSnapshotClass specifies parameters that a underlying storage
-          system uses when creating a volume snapshot. A specific VolumeSnapshotClass
-          is used by specifying its name in a VolumeSnapshot object. VolumeSnapshotClasses
-          are non-namespaced
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          deletionPolicy:
-            description: deletionPolicy determines whether a VolumeSnapshotContent
-              created through the VolumeSnapshotClass should be deleted when its bound
-              VolumeSnapshot is deleted. Supported values are "Retain" and "Delete".
-              "Retain" means that the VolumeSnapshotContent and its physical snapshot
-              on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent
-              and its physical snapshot on underlying storage system are deleted.
-              Required.
-            enum:
-            - Delete
-            - Retain
-            type: string
-          driver:
-            description: driver is the name of the storage driver that handles this
-              VolumeSnapshotClass. Required.
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          parameters:
-            additionalProperties:
-              type: string
-            description: parameters is a key-value map with storage driver specific
-              parameters for creating snapshots. These values are opaque to Kubernetes.
-            type: object
-        required:
-        - deletionPolicy
-        - driver
-        type: object
-    served: true
-    storage: true
-    subresources: {}
-  - additionalPrinterColumns:
-    - jsonPath: .driver
-      name: Driver
-      type: string
-    - description: Determines whether a VolumeSnapshotContent created through the
-        VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted.
-      jsonPath: .deletionPolicy
-      name: DeletionPolicy
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    deprecated: true
-    deprecationWarning: snapshot.storage.k8s.io/v1beta1 VolumeSnapshotClass is deprecated;
-      use snapshot.storage.k8s.io/v1 VolumeSnapshotClass
-    name: v1beta1
-    schema:
-      openAPIV3Schema:
-        description: VolumeSnapshotClass specifies parameters that a underlying storage
-          system uses when creating a volume snapshot. A specific VolumeSnapshotClass
-          is used by specifying its name in a VolumeSnapshot object. VolumeSnapshotClasses
-          are non-namespaced
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          deletionPolicy:
-            description: deletionPolicy determines whether a VolumeSnapshotContent
-              created through the VolumeSnapshotClass should be deleted when its bound
-              VolumeSnapshot is deleted. Supported values are "Retain" and "Delete".
-              "Retain" means that the VolumeSnapshotContent and its physical snapshot
-              on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent
-              and its physical snapshot on underlying storage system are deleted.
-              Required.
-            enum:
-            - Delete
-            - Retain
-            type: string
-          driver:
-            description: driver is the name of the storage driver that handles this
-              VolumeSnapshotClass. Required.
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          parameters:
-            additionalProperties:
-              type: string
-            description: parameters is a key-value map with storage driver specific
-              parameters for creating snapshots. These values are opaque to Kubernetes.
-            type: object
-        required:
-        - deletionPolicy
-        - driver
-        type: object
-    served: true
-    storage: false
-    subresources: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-csi/external-snapshotter/pull/419
-    controller-gen.kubebuilder.io/version: v0.4.0
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: volumesnapshotcontents.snapshot.storage.k8s.io
-spec:
-  group: snapshot.storage.k8s.io
-  names:
-    kind: VolumeSnapshotContent
-    listKind: VolumeSnapshotContentList
-    plural: volumesnapshotcontents
-    shortNames:
-    - vsc
-    - vscs
-    singular: volumesnapshotcontent
-  scope: Cluster
-  versions:
-  - additionalPrinterColumns:
-    - description: Indicates if the snapshot is ready to be used to restore a volume.
-      jsonPath: .status.readyToUse
-      name: ReadyToUse
-      type: boolean
-    - description: Represents the complete size of the snapshot in bytes
-      jsonPath: .status.restoreSize
-      name: RestoreSize
-      type: integer
-    - description: Determines whether this VolumeSnapshotContent and its physical
-        snapshot on the underlying storage system should be deleted when its bound
-        VolumeSnapshot is deleted.
-      jsonPath: .spec.deletionPolicy
-      name: DeletionPolicy
-      type: string
-    - description: Name of the CSI driver used to create the physical snapshot on
-        the underlying storage system.
-      jsonPath: .spec.driver
-      name: Driver
-      type: string
-    - description: Name of the VolumeSnapshotClass to which this snapshot belongs.
-      jsonPath: .spec.volumeSnapshotClassName
-      name: VolumeSnapshotClass
-      type: string
-    - description: Name of the VolumeSnapshot object to which this VolumeSnapshotContent
-        object is bound.
-      jsonPath: .spec.volumeSnapshotRef.name
-      name: VolumeSnapshot
-      type: string
-    - description: Namespace of the VolumeSnapshot object to which this VolumeSnapshotContent
-        object is bound.
-      jsonPath: .spec.volumeSnapshotRef.namespace
-      name: VolumeSnapshotNamespace
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: VolumeSnapshotContent represents the actual "on-disk" snapshot
-          object in the underlying storage system
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          spec:
-            description: spec defines properties of a VolumeSnapshotContent created
-              by the underlying storage system. Required.
-            properties:
-              deletionPolicy:
-                description: deletionPolicy determines whether this VolumeSnapshotContent
-                  and its physical snapshot on the underlying storage system should
-                  be deleted when its bound VolumeSnapshot is deleted. Supported values
-                  are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent
-                  and its physical snapshot on underlying storage system are kept.
-                  "Delete" means that the VolumeSnapshotContent and its physical snapshot
-                  on underlying storage system are deleted. For dynamically provisioned
-                  snapshots, this field will automatically be filled in by the CSI
-                  snapshotter sidecar with the "DeletionPolicy" field defined in the
-                  corresponding VolumeSnapshotClass. For pre-existing snapshots, users
-                  MUST specify this field when creating the  VolumeSnapshotContent
-                  object. Required.
-                enum:
-                - Delete
-                - Retain
-                type: string
-              driver:
-                description: driver is the name of the CSI driver used to create the
-                  physical snapshot on the underlying storage system. This MUST be
-                  the same as the name returned by the CSI GetPluginName() call for
-                  that driver. Required.
-                type: string
-              source:
-                description: source specifies whether the snapshot is (or should be)
-                  dynamically provisioned or already exists, and just requires a Kubernetes
-                  object representation. This field is immutable after creation. Required.
-                oneOf:
-                - required:
-                  - snapshotHandle
-                - required:
-                  - volumeHandle
-                properties:
-                  snapshotHandle:
-                    description: snapshotHandle specifies the CSI "snapshot_id" of
-                      a pre-existing snapshot on the underlying storage system for
-                      which a Kubernetes object representation was (or should be)
-                      created. This field is immutable.
-                    type: string
-                  volumeHandle:
-                    description: volumeHandle specifies the CSI "volume_id" of the
-                      volume from which a snapshot should be dynamically taken from.
-                      This field is immutable.
-                    type: string
-                type: object
-              volumeSnapshotClassName:
-                description: name of the VolumeSnapshotClass from which this snapshot
-                  was (or will be) created. Note that after provisioning, the VolumeSnapshotClass
-                  may be deleted or recreated with different set of values, and as
-                  such, should not be referenced post-snapshot creation.
-                type: string
-              volumeSnapshotRef:
-                description: volumeSnapshotRef specifies the VolumeSnapshot object
-                  to which this VolumeSnapshotContent object is bound. VolumeSnapshot.Spec.VolumeSnapshotContentName
-                  field must reference to this VolumeSnapshotContent's name for the
-                  bidirectional binding to be valid. For a pre-existing VolumeSnapshotContent
-                  object, name and namespace of the VolumeSnapshot object MUST be
-                  provided for binding to happen. This field is immutable after creation.
-                  Required.
-                properties:
-                  apiVersion:
-                    description: API version of the referent.
-                    type: string
-                  fieldPath:
-                    description: 'If referring to a piece of an object instead of
-                      an entire object, this string should contain a valid JSON/Go
-                      field access statement, such as desiredState.manifest.containers[2].
-                      For example, if the object reference is to a container within
-                      a pod, this would take on a value like: "spec.containers{name}"
-                      (where "name" refers to the name of the container that triggered
-                      the event) or if no container name is specified "spec.containers[2]"
-                      (container with index 2 in this pod). This syntax is chosen
-                      only to have some well-defined way of referencing a part of
-                      an object. TODO: this design is not final and this field is
-                      subject to change in the future.'
-                    type: string
-                  kind:
-                    description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-                    type: string
-                  name:
-                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                    type: string
-                  namespace:
-                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
-                    type: string
-                  resourceVersion:
-                    description: 'Specific resourceVersion to which this reference
-                      is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
-                    type: string
-                  uid:
-                    description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
-                    type: string
-                type: object
-            required:
-            - deletionPolicy
-            - driver
-            - source
-            - volumeSnapshotRef
-            type: object
-          status:
-            description: status represents the current information of a snapshot.
-            properties:
-              creationTime:
-                description: creationTime is the timestamp when the point-in-time
-                  snapshot is taken by the underlying storage system. In dynamic snapshot
-                  creation case, this field will be filled in by the CSI snapshotter
-                  sidecar with the "creation_time" value returned from CSI "CreateSnapshot"
-                  gRPC call. For a pre-existing snapshot, this field will be filled
-                  with the "creation_time" value returned from the CSI "ListSnapshots"
-                  gRPC call if the driver supports it. If not specified, it indicates
-                  the creation time is unknown. The format of this field is a Unix
-                  nanoseconds time encoded as an int64. On Unix, the command `date
-                  +%s%N` returns the current time in nanoseconds since 1970-01-01
-                  00:00:00 UTC.
-                format: int64
-                type: integer
-              error:
-                description: error is the last observed error during snapshot creation,
-                  if any. Upon success after retry, this error field will be cleared.
-                properties:
-                  message:
-                    description: 'message is a string detailing the encountered error
-                      during snapshot creation if specified. NOTE: message may be
-                      logged, and it should not contain sensitive information.'
-                    type: string
-                  time:
-                    description: time is the timestamp when the error was encountered.
-                    format: date-time
-                    type: string
-                type: object
-              readyToUse:
-                description: readyToUse indicates if a snapshot is ready to be used
-                  to restore a volume. In dynamic snapshot creation case, this field
-                  will be filled in by the CSI snapshotter sidecar with the "ready_to_use"
-                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
-                  snapshot, this field will be filled with the "ready_to_use" value
-                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
-                  it, otherwise, this field will be set to "True". If not specified,
-                  it means the readiness of a snapshot is unknown.
-                type: boolean
-              restoreSize:
-                description: restoreSize represents the complete size of the snapshot
-                  in bytes. In dynamic snapshot creation case, this field will be
-                  filled in by the CSI snapshotter sidecar with the "size_bytes" value
-                  returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
-                  snapshot, this field will be filled with the "size_bytes" value
-                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
-                  it. When restoring a volume from this snapshot, the size of the
-                  volume MUST NOT be smaller than the restoreSize if it is specified,
-                  otherwise the restoration will fail. If not specified, it indicates
-                  that the size is unknown.
-                format: int64
-                minimum: 0
-                type: integer
-              snapshotHandle:
-                description: snapshotHandle is the CSI "snapshot_id" of a snapshot
-                  on the underlying storage system. If not specified, it indicates
-                  that dynamic snapshot creation has either failed or it is still
-                  in progress.
-                type: string
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-  - additionalPrinterColumns:
-    - description: Indicates if the snapshot is ready to be used to restore a volume.
-      jsonPath: .status.readyToUse
-      name: ReadyToUse
-      type: boolean
-    - description: Represents the complete size of the snapshot in bytes
-      jsonPath: .status.restoreSize
-      name: RestoreSize
-      type: integer
-    - description: Determines whether this VolumeSnapshotContent and its physical
-        snapshot on the underlying storage system should be deleted when its bound
-        VolumeSnapshot is deleted.
-      jsonPath: .spec.deletionPolicy
-      name: DeletionPolicy
-      type: string
-    - description: Name of the CSI driver used to create the physical snapshot on
-        the underlying storage system.
-      jsonPath: .spec.driver
-      name: Driver
-      type: string
-    - description: Name of the VolumeSnapshotClass to which this snapshot belongs.
-      jsonPath: .spec.volumeSnapshotClassName
-      name: VolumeSnapshotClass
-      type: string
-    - description: Name of the VolumeSnapshot object to which this VolumeSnapshotContent
-        object is bound.
-      jsonPath: .spec.volumeSnapshotRef.name
-      name: VolumeSnapshot
-      type: string
-    - description: Namespace of the VolumeSnapshot object to which this VolumeSnapshotContent
-        object is bound.
-      jsonPath: .spec.volumeSnapshotRef.namespace
-      name: VolumeSnapshotNamespace
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    deprecated: true
-    deprecationWarning: snapshot.storage.k8s.io/v1beta1 VolumeSnapshotContent is deprecated;
-      use snapshot.storage.k8s.io/v1 VolumeSnapshotContent
-    name: v1beta1
-    schema:
-      openAPIV3Schema:
-        description: VolumeSnapshotContent represents the actual "on-disk" snapshot
-          object in the underlying storage system
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          spec:
-            description: spec defines properties of a VolumeSnapshotContent created
-              by the underlying storage system. Required.
-            properties:
-              deletionPolicy:
-                description: deletionPolicy determines whether this VolumeSnapshotContent
-                  and its physical snapshot on the underlying storage system should
-                  be deleted when its bound VolumeSnapshot is deleted. Supported values
-                  are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent
-                  and its physical snapshot on underlying storage system are kept.
-                  "Delete" means that the VolumeSnapshotContent and its physical snapshot
-                  on underlying storage system are deleted. For dynamically provisioned
-                  snapshots, this field will automatically be filled in by the CSI
-                  snapshotter sidecar with the "DeletionPolicy" field defined in the
-                  corresponding VolumeSnapshotClass. For pre-existing snapshots, users
-                  MUST specify this field when creating the  VolumeSnapshotContent
-                  object. Required.
-                enum:
-                - Delete
-                - Retain
-                type: string
-              driver:
-                description: driver is the name of the CSI driver used to create the
-                  physical snapshot on the underlying storage system. This MUST be
-                  the same as the name returned by the CSI GetPluginName() call for
-                  that driver. Required.
-                type: string
-              source:
-                description: source specifies whether the snapshot is (or should be)
-                  dynamically provisioned or already exists, and just requires a Kubernetes
-                  object representation. This field is immutable after creation. Required.
-                properties:
-                  snapshotHandle:
-                    description: snapshotHandle specifies the CSI "snapshot_id" of
-                      a pre-existing snapshot on the underlying storage system for
-                      which a Kubernetes object representation was (or should be)
-                      created. This field is immutable.
-                    type: string
-                  volumeHandle:
-                    description: volumeHandle specifies the CSI "volume_id" of the
-                      volume from which a snapshot should be dynamically taken from.
-                      This field is immutable.
-                    type: string
-                type: object
-              volumeSnapshotClassName:
-                description: name of the VolumeSnapshotClass from which this snapshot
-                  was (or will be) created. Note that after provisioning, the VolumeSnapshotClass
-                  may be deleted or recreated with different set of values, and as
-                  such, should not be referenced post-snapshot creation.
-                type: string
-              volumeSnapshotRef:
-                description: volumeSnapshotRef specifies the VolumeSnapshot object
-                  to which this VolumeSnapshotContent object is bound. VolumeSnapshot.Spec.VolumeSnapshotContentName
-                  field must reference to this VolumeSnapshotContent's name for the
-                  bidirectional binding to be valid. For a pre-existing VolumeSnapshotContent
-                  object, name and namespace of the VolumeSnapshot object MUST be
-                  provided for binding to happen. This field is immutable after creation.
-                  Required.
-                properties:
-                  apiVersion:
-                    description: API version of the referent.
-                    type: string
-                  fieldPath:
-                    description: 'If referring to a piece of an object instead of
-                      an entire object, this string should contain a valid JSON/Go
-                      field access statement, such as desiredState.manifest.containers[2].
-                      For example, if the object reference is to a container within
-                      a pod, this would take on a value like: "spec.containers{name}"
-                      (where "name" refers to the name of the container that triggered
-                      the event) or if no container name is specified "spec.containers[2]"
-                      (container with index 2 in this pod). This syntax is chosen
-                      only to have some well-defined way of referencing a part of
-                      an object. TODO: this design is not final and this field is
-                      subject to change in the future.'
-                    type: string
-                  kind:
-                    description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-                    type: string
-                  name:
-                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                    type: string
-                  namespace:
-                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
-                    type: string
-                  resourceVersion:
-                    description: 'Specific resourceVersion to which this reference
-                      is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
-                    type: string
-                  uid:
-                    description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
-                    type: string
-                type: object
-            required:
-            - deletionPolicy
-            - driver
-            - source
-            - volumeSnapshotRef
-            type: object
-          status:
-            description: status represents the current information of a snapshot.
-            properties:
-              creationTime:
-                description: creationTime is the timestamp when the point-in-time
-                  snapshot is taken by the underlying storage system. In dynamic snapshot
-                  creation case, this field will be filled in by the CSI snapshotter
-                  sidecar with the "creation_time" value returned from CSI "CreateSnapshot"
-                  gRPC call. For a pre-existing snapshot, this field will be filled
-                  with the "creation_time" value returned from the CSI "ListSnapshots"
-                  gRPC call if the driver supports it. If not specified, it indicates
-                  the creation time is unknown. The format of this field is a Unix
-                  nanoseconds time encoded as an int64. On Unix, the command `date
-                  +%s%N` returns the current time in nanoseconds since 1970-01-01
-                  00:00:00 UTC.
-                format: int64
-                type: integer
-              error:
-                description: error is the last observed error during snapshot creation,
-                  if any. Upon success after retry, this error field will be cleared.
-                properties:
-                  message:
-                    description: 'message is a string detailing the encountered error
-                      during snapshot creation if specified. NOTE: message may be
-                      logged, and it should not contain sensitive information.'
-                    type: string
-                  time:
-                    description: time is the timestamp when the error was encountered.
-                    format: date-time
-                    type: string
-                type: object
-              readyToUse:
-                description: readyToUse indicates if a snapshot is ready to be used
-                  to restore a volume. In dynamic snapshot creation case, this field
-                  will be filled in by the CSI snapshotter sidecar with the "ready_to_use"
-                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
-                  snapshot, this field will be filled with the "ready_to_use" value
-                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
-                  it, otherwise, this field will be set to "True". If not specified,
-                  it means the readiness of a snapshot is unknown.
-                type: boolean
-              restoreSize:
-                description: restoreSize represents the complete size of the snapshot
-                  in bytes. In dynamic snapshot creation case, this field will be
-                  filled in by the CSI snapshotter sidecar with the "size_bytes" value
-                  returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
-                  snapshot, this field will be filled with the "size_bytes" value
-                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
-                  it. When restoring a volume from this snapshot, the size of the
-                  volume MUST NOT be smaller than the restoreSize if it is specified,
-                  otherwise the restoration will fail. If not specified, it indicates
-                  that the size is unknown.
-                format: int64
-                minimum: 0
-                type: integer
-              snapshotHandle:
-                description: snapshotHandle is the CSI "snapshot_id" of a snapshot
-                  on the underlying storage system. If not specified, it indicates
-                  that dynamic snapshot creation has either failed or it is still
-                  in progress.
-                type: string
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: false
-    subresources:
-      status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
-
----
-
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-csi/external-snapshotter/pull/419
-    controller-gen.kubebuilder.io/version: v0.4.0
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: volumesnapshots.snapshot.storage.k8s.io
-spec:
-  group: snapshot.storage.k8s.io
-  names:
-    kind: VolumeSnapshot
-    listKind: VolumeSnapshotList
-    plural: volumesnapshots
-    shortNames:
-    - vs
-    singular: volumesnapshot
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - description: Indicates if the snapshot is ready to be used to restore a volume.
-      jsonPath: .status.readyToUse
-      name: ReadyToUse
-      type: boolean
-    - description: If a new snapshot needs to be created, this contains the name of
-        the source PVC from which this snapshot was (or will be) created.
-      jsonPath: .spec.source.persistentVolumeClaimName
-      name: SourcePVC
-      type: string
-    - description: If a snapshot already exists, this contains the name of the existing
-        VolumeSnapshotContent object representing the existing snapshot.
-      jsonPath: .spec.source.volumeSnapshotContentName
-      name: SourceSnapshotContent
-      type: string
-    - description: Represents the minimum size of volume required to rehydrate from
-        this snapshot.
-      jsonPath: .status.restoreSize
-      name: RestoreSize
-      type: string
-    - description: The name of the VolumeSnapshotClass requested by the VolumeSnapshot.
-      jsonPath: .spec.volumeSnapshotClassName
-      name: SnapshotClass
-      type: string
-    - description: Name of the VolumeSnapshotContent object to which the VolumeSnapshot
-        object intends to bind to. Please note that verification of binding actually
-        requires checking both VolumeSnapshot and VolumeSnapshotContent to ensure
-        both are pointing at each other. Binding MUST be verified prior to usage of
-        this object.
-      jsonPath: .status.boundVolumeSnapshotContentName
-      name: SnapshotContent
-      type: string
-    - description: Timestamp when the point-in-time snapshot was taken by the underlying
-        storage system.
-      jsonPath: .status.creationTime
-      name: CreationTime
-      type: date
-    - jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    name: v1
-    schema:
-      openAPIV3Schema:
-        description: VolumeSnapshot is a user's request for either creating a point-in-time
-          snapshot of a persistent volume, or binding to a pre-existing snapshot.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          spec:
-            description: 'spec defines the desired characteristics of a snapshot requested
-              by a user. More info: https://kubernetes.io/docs/concepts/storage/volume-snapshots#volumesnapshots
-              Required.'
-            properties:
-              source:
-                description: source specifies where a snapshot will be created from.
-                  This field is immutable after creation. Required.
-                oneOf:
-                - required:
-                  - persistentVolumeClaimName
-                - required:
-                  - volumeSnapshotContentName
-                properties:
-                  persistentVolumeClaimName:
-                    description: persistentVolumeClaimName specifies the name of the
-                      PersistentVolumeClaim object representing the volume from which
-                      a snapshot should be created. This PVC is assumed to be in the
-                      same namespace as the VolumeSnapshot object. This field should
-                      be set if the snapshot does not exists, and needs to be created.
-                      This field is immutable.
-                    type: string
-                  volumeSnapshotContentName:
-                    description: volumeSnapshotContentName specifies the name of a
-                      pre-existing VolumeSnapshotContent object representing an existing
-                      volume snapshot. This field should be set if the snapshot already
-                      exists and only needs a representation in Kubernetes. This field
-                      is immutable.
-                    type: string
-                type: object
-              volumeSnapshotClassName:
-                description: 'VolumeSnapshotClassName is the name of the VolumeSnapshotClass
-                  requested by the VolumeSnapshot. VolumeSnapshotClassName may be
-                  left nil to indicate that the default SnapshotClass should be used.
-                  A given cluster may have multiple default Volume SnapshotClasses:
-                  one default per CSI Driver. If a VolumeSnapshot does not specify
-                  a SnapshotClass, VolumeSnapshotSource will be checked to figure
-                  out what the associated CSI Driver is, and the default VolumeSnapshotClass
-                  associated with that CSI Driver will be used. If more than one VolumeSnapshotClass
-                  exist for a given CSI Driver and more than one have been marked
-                  as default, CreateSnapshot will fail and generate an event. Empty
-                  string is not allowed for this field.'
-                type: string
-            required:
-            - source
-            type: object
-          status:
-            description: status represents the current information of a snapshot.
-              Consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent
-              objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent
-              point at each other) before using this object.
-            properties:
-              boundVolumeSnapshotContentName:
-                description: 'boundVolumeSnapshotContentName is the name of the VolumeSnapshotContent
-                  object to which this VolumeSnapshot object intends to bind to. If
-                  not specified, it indicates that the VolumeSnapshot object has not
-                  been successfully bound to a VolumeSnapshotContent object yet. NOTE:
-                  To avoid possible security issues, consumers must verify binding
-                  between VolumeSnapshot and VolumeSnapshotContent objects is successful
-                  (by validating that both VolumeSnapshot and VolumeSnapshotContent
-                  point at each other) before using this object.'
-                type: string
-              creationTime:
-                description: creationTime is the timestamp when the point-in-time
-                  snapshot is taken by the underlying storage system. In dynamic snapshot
-                  creation case, this field will be filled in by the snapshot controller
-                  with the "creation_time" value returned from CSI "CreateSnapshot"
-                  gRPC call. For a pre-existing snapshot, this field will be filled
-                  with the "creation_time" value returned from the CSI "ListSnapshots"
-                  gRPC call if the driver supports it. If not specified, it may indicate
-                  that the creation time of the snapshot is unknown.
-                format: date-time
-                type: string
-              error:
-                description: error is the last observed error during snapshot creation,
-                  if any. This field could be helpful to upper level controllers(i.e.,
-                  application controller) to decide whether they should continue on
-                  waiting for the snapshot to be created based on the type of error
-                  reported. The snapshot controller will keep retrying when an error
-                  occurrs during the snapshot creation. Upon success, this error field
-                  will be cleared.
-                properties:
-                  message:
-                    description: 'message is a string detailing the encountered error
-                      during snapshot creation if specified. NOTE: message may be
-                      logged, and it should not contain sensitive information.'
-                    type: string
-                  time:
-                    description: time is the timestamp when the error was encountered.
-                    format: date-time
-                    type: string
-                type: object
-              readyToUse:
-                description: readyToUse indicates if the snapshot is ready to be used
-                  to restore a volume. In dynamic snapshot creation case, this field
-                  will be filled in by the snapshot controller with the "ready_to_use"
-                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
-                  snapshot, this field will be filled with the "ready_to_use" value
-                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
-                  it, otherwise, this field will be set to "True". If not specified,
-                  it means the readiness of a snapshot is unknown.
-                type: boolean
-              restoreSize:
-                description: restoreSize represents the minimum size of volume required
-                  to create a volume from this snapshot. In dynamic snapshot creation
-                  case, this field will be filled in by the snapshot controller with
-                  the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call.
-                  For a pre-existing snapshot, this field will be filled with the
-                  "size_bytes" value returned from the CSI "ListSnapshots" gRPC call
-                  if the driver supports it. When restoring a volume from this snapshot,
-                  the size of the volume MUST NOT be smaller than the restoreSize
-                  if it is specified, otherwise the restoration will fail. If not
-                  specified, it indicates that the size is unknown.
-                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                type: string
-                x-kubernetes-int-or-string: true
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-  - additionalPrinterColumns:
-    - description: Indicates if the snapshot is ready to be used to restore a volume.
-      jsonPath: .status.readyToUse
-      name: ReadyToUse
-      type: boolean
-    - description: If a new snapshot needs to be created, this contains the name of
-        the source PVC from which this snapshot was (or will be) created.
-      jsonPath: .spec.source.persistentVolumeClaimName
-      name: SourcePVC
-      type: string
-    - description: If a snapshot already exists, this contains the name of the existing
-        VolumeSnapshotContent object representing the existing snapshot.
-      jsonPath: .spec.source.volumeSnapshotContentName
-      name: SourceSnapshotContent
-      type: string
-    - description: Represents the minimum size of volume required to rehydrate from
-        this snapshot.
-      jsonPath: .status.restoreSize
-      name: RestoreSize
-      type: string
-    - description: The name of the VolumeSnapshotClass requested by the VolumeSnapshot.
-      jsonPath: .spec.volumeSnapshotClassName
-      name: SnapshotClass
-      type: string
-    - description: Name of the VolumeSnapshotContent object to which the VolumeSnapshot
-        object intends to bind to. Please note that verification of binding actually
-        requires checking both VolumeSnapshot and VolumeSnapshotContent to ensure
-        both are pointing at each other. Binding MUST be verified prior to usage of
-        this object.
-      jsonPath: .status.boundVolumeSnapshotContentName
-      name: SnapshotContent
-      type: string
-    - description: Timestamp when the point-in-time snapshot was taken by the underlying
-        storage system.
-      jsonPath: .status.creationTime
-      name: CreationTime
-      type: date
-    - jsonPath: .metadata.creationTimestamp
-      name: Age
-      type: date
-    deprecated: true
-    deprecationWarning: snapshot.storage.k8s.io/v1beta1 VolumeSnapshot is deprecated;
-      use snapshot.storage.k8s.io/v1 VolumeSnapshot
-    name: v1beta1
-    schema:
-      openAPIV3Schema:
-        description: VolumeSnapshot is a user's request for either creating a point-in-time
-          snapshot of a persistent volume, or binding to a pre-existing snapshot.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          spec:
-            description: 'spec defines the desired characteristics of a snapshot requested
-              by a user. More info: https://kubernetes.io/docs/concepts/storage/volume-snapshots#volumesnapshots
-              Required.'
-            properties:
-              source:
-                description: source specifies where a snapshot will be created from.
-                  This field is immutable after creation. Required.
-                properties:
-                  persistentVolumeClaimName:
-                    description: persistentVolumeClaimName specifies the name of the
-                      PersistentVolumeClaim object representing the volume from which
-                      a snapshot should be created. This PVC is assumed to be in the
-                      same namespace as the VolumeSnapshot object. This field should
-                      be set if the snapshot does not exists, and needs to be created.
-                      This field is immutable.
-                    type: string
-                  volumeSnapshotContentName:
-                    description: volumeSnapshotContentName specifies the name of a
-                      pre-existing VolumeSnapshotContent object representing an existing
-                      volume snapshot. This field should be set if the snapshot already
-                      exists and only needs a representation in Kubernetes. This field
-                      is immutable.
-                    type: string
-                type: object
-              volumeSnapshotClassName:
-                description: 'VolumeSnapshotClassName is the name of the VolumeSnapshotClass
-                  requested by the VolumeSnapshot. VolumeSnapshotClassName may be
-                  left nil to indicate that the default SnapshotClass should be used.
-                  A given cluster may have multiple default Volume SnapshotClasses:
-                  one default per CSI Driver. If a VolumeSnapshot does not specify
-                  a SnapshotClass, VolumeSnapshotSource will be checked to figure
-                  out what the associated CSI Driver is, and the default VolumeSnapshotClass
-                  associated with that CSI Driver will be used. If more than one VolumeSnapshotClass
-                  exist for a given CSI Driver and more than one have been marked
-                  as default, CreateSnapshot will fail and generate an event. Empty
-                  string is not allowed for this field.'
-                type: string
-            required:
-            - source
-            type: object
-          status:
-            description: status represents the current information of a snapshot.
-              Consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent
-              objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent
-              point at each other) before using this object.
-            properties:
-              boundVolumeSnapshotContentName:
-                description: 'boundVolumeSnapshotContentName is the name of the VolumeSnapshotContent
-                  object to which this VolumeSnapshot object intends to bind to. If
-                  not specified, it indicates that the VolumeSnapshot object has not
-                  been successfully bound to a VolumeSnapshotContent object yet. NOTE:
-                  To avoid possible security issues, consumers must verify binding
-                  between VolumeSnapshot and VolumeSnapshotContent objects is successful
-                  (by validating that both VolumeSnapshot and VolumeSnapshotContent
-                  point at each other) before using this object.'
-                type: string
-              creationTime:
-                description: creationTime is the timestamp when the point-in-time
-                  snapshot is taken by the underlying storage system. In dynamic snapshot
-                  creation case, this field will be filled in by the snapshot controller
-                  with the "creation_time" value returned from CSI "CreateSnapshot"
-                  gRPC call. For a pre-existing snapshot, this field will be filled
-                  with the "creation_time" value returned from the CSI "ListSnapshots"
-                  gRPC call if the driver supports it. If not specified, it may indicate
-                  that the creation time of the snapshot is unknown.
-                format: date-time
-                type: string
-              error:
-                description: error is the last observed error during snapshot creation,
-                  if any. This field could be helpful to upper level controllers(i.e.,
-                  application controller) to decide whether they should continue on
-                  waiting for the snapshot to be created based on the type of error
-                  reported. The snapshot controller will keep retrying when an error
-                  occurrs during the snapshot creation. Upon success, this error field
-                  will be cleared.
-                properties:
-                  message:
-                    description: 'message is a string detailing the encountered error
-                      during snapshot creation if specified. NOTE: message may be
-                      logged, and it should not contain sensitive information.'
-                    type: string
-                  time:
-                    description: time is the timestamp when the error was encountered.
-                    format: date-time
-                    type: string
-                type: object
-              readyToUse:
-                description: readyToUse indicates if the snapshot is ready to be used
-                  to restore a volume. In dynamic snapshot creation case, this field
-                  will be filled in by the snapshot controller with the "ready_to_use"
-                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
-                  snapshot, this field will be filled with the "ready_to_use" value
-                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
-                  it, otherwise, this field will be set to "True". If not specified,
-                  it means the readiness of a snapshot is unknown.
-                type: boolean
-              restoreSize:
-                description: restoreSize represents the minimum size of volume required
-                  to create a volume from this snapshot. In dynamic snapshot creation
-                  case, this field will be filled in by the snapshot controller with
-                  the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call.
-                  For a pre-existing snapshot, this field will be filled with the
-                  "size_bytes" value returned from the CSI "ListSnapshots" gRPC call
-                  if the driver supports it. When restoring a volume from this snapshot,
-                  the size of the volume MUST NOT be smaller than the restoreSize
-                  if it is specified, otherwise the restoration will fail. If not
-                  specified, it indicates that the size is unknown.
-                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                type: string
-                x-kubernetes-int-or-string: true
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: false
-    subresources:
-      status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
-
----
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-controller
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-controller-leaderelection
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - get
-  - watch
-  - list
-  - delete
-  - update
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-controller-runner
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotcontents
-  verbs:
-  - create
-  - get
-  - list
-  - watch
-  - delete
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotcontents/status
-  verbs:
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshots
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshots/status
-  verbs:
-  - update
-  - patch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-controller-leaderelection
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: snapshot-controller-leaderelection
-subjects:
-- kind: ServiceAccount
-  name: snapshot-controller
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-controller-role
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: snapshot-controller-runner
-subjects:
-- kind: ServiceAccount
-  name: snapshot-controller
-  namespace: kube-system
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-controller
-  namespace: kube-system
-spec:
-  minReadySeconds: 15
-  replicas: 2
-  selector:
-    matchLabels:
-      app: snapshot-controller
-  strategy:
-    rollingUpdate:
-      maxSurge: 0
-      maxUnavailable: 1
-    type: RollingUpdate
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app: snapshot-controller
-        kops.k8s.io/managed-by: kops
-    spec:
-      containers:
-      - args:
-        - --v=5
-        - --leader-election=true
-        image: registry.k8s.io/sig-storage/snapshot-controller:v6.0.1
-        imagePullPolicy: IfNotPresent
-        name: snapshot-controller
-      serviceAccountName: snapshot-controller
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            app: snapshot-controller
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            app: snapshot-controller
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app: snapshot-validation
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-validation-deployment
-  namespace: kube-system
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: snapshot-validation
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app: snapshot-validation
-        kops.k8s.io/managed-by: kops
-    spec:
-      containers:
-      - args:
-        - --tls-cert-file=/etc/snapshot-validation-webhook/certs/tls.crt
-        - --tls-private-key-file=/etc/snapshot-validation-webhook/certs/tls.key
-        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.0.1
-        imagePullPolicy: IfNotPresent
-        name: snapshot-validation
-        ports:
-        - containerPort: 443
-        volumeMounts:
-        - mountPath: /etc/snapshot-validation-webhook/certs
-          name: snapshot-validation-webhook-certs
-          readOnly: true
-      serviceAccountName: snapshot-controller
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            app: snapshot-validation
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            app: snapshot-validation
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-      volumes:
-      - name: snapshot-validation-webhook-certs
-        secret:
-          secretName: snapshot-validation-secret
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-validation-service
-  namespace: kube-system
-spec:
-  ports:
-  - port: 443
-    protocol: TCP
-    targetPort: 443
-  selector:
-    app: snapshot-validation
-
----
-
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  annotations:
-    cert-manager.io/inject-ca-from: kube-system/snapshot-validation-service
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: validation-webhook.snapshot.storage.k8s.io
-webhooks:
-- admissionReviewVersions:
-  - v1
-  - v1beta1
-  clientConfig:
-    service:
-      name: snapshot-validation-service
-      namespace: kube-system
-      path: /volumesnapshot
-  failurePolicy: Ignore
-  name: validation-webhook.snapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - snapshot.storage.k8s.io
-    apiVersions:
-    - v1
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumesnapshots
-    - volumesnapshotcontents
-    scope: '*'
-  sideEffects: None
-  timeoutSeconds: 2
-
----
-
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: snapshot-controller.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: snapshot-controller.addons.k8s.io
-  name: snapshot-validation-service
-  namespace: kube-system
-spec:
-  dnsNames:
-  - snapshot-validation-service.kube-system.svc
-  - snapshot-validation-service.kube-system.svc.minimal.example.com
-  issuerRef:
-    kind: Issuer
-    name: snapshot-controller.addons.k8s.io
-  secretName: snapshot-validation-secret
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
deleted file mode 100644
index 97cdf3b8fb10c..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
+++ /dev/null
@@ -1,336 +0,0 @@
-APIServerConfig:
-  API:
-    dns: {}
-    publicName: api.minimal.example.com
-  ClusterDNSDomain: cluster.local
-  KubeAPIServer:
-    allowPrivileged: true
-    anonymousAuth: false
-    apiAudiences:
-    - kubernetes.svc.default
-    apiServerCount: 1
-    authorizationMode: AlwaysAllow
-    bindAddress: 0.0.0.0
-    cloudProvider: external
-    enableAdmissionPlugins:
-    - NamespaceLifecycle
-    - LimitRanger
-    - ServiceAccount
-    - DefaultStorageClass
-    - DefaultTolerationSeconds
-    - MutatingAdmissionWebhook
-    - ValidatingAdmissionWebhook
-    - NodeRestriction
-    - ResourceQuota
-    enableAggregatorRouting: true
-    etcdServers:
-    - https://127.0.0.1:4001
-    etcdServersOverrides:
-    - /events#https://127.0.0.1:4002
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
-    kubeletPreferredAddressTypes:
-    - InternalIP
-    - Hostname
-    - ExternalIP
-    logLevel: 2
-    requestheaderAllowedNames:
-    - aggregator
-    requestheaderExtraHeaderPrefixes:
-    - X-Remote-Extra-
-    requestheaderGroupHeaders:
-    - X-Remote-Group
-    requestheaderUsernameHeaders:
-    - X-Remote-User
-    securePort: 443
-    serviceAccountIssuer: https://discovery.example.com/minimal.example.com
-    serviceAccountJWKSURI: https://discovery.example.com/minimal.example.com/openid/v1/jwks
-    serviceClusterIPRange: 100.64.0.0/13
-    storageBackend: etcd3
-  ServiceAccountPublicKeys: |
-    -----BEGIN RSA PUBLIC KEY-----
-    MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANiW3hfHTcKnxCig+uWhpVbOfH1pANKm
-    XVSysPKgE80QSU4tZ6m49pAEeIMsvwvDMaLsb2v6JvXe0qvCmueU+/sCAwEAAQ==
-    -----END RSA PUBLIC KEY-----
-    -----BEGIN RSA PUBLIC KEY-----
-    MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKOE64nZbH+GM91AIrqf7HEk4hvzqsZF
-    Ftxc+8xir1XC3mI/RhCCrs6AdVRZNZ26A6uHArhi33c2kHQkCjyLA7sCAwEAAQ==
-    -----END RSA PUBLIC KEY-----
-Assets:
-  amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
-  - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
-  - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
-  - f90ed6dcef534e6d1ae17907dc7eb40614b8945ad4af7f0e98d2be7cde8165c6@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-amd64
-  - 9992e7eb2a2e93f799e5a9e98eb718637433524bc65f630357201a79f49b13d0@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-amd64
-  arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
-  - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
-  - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
-  - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
-  - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
-CAs:
-  apiserver-aggregator-ca: |
-    -----BEGIN CERTIFICATE-----
-    MIIBgjCCASygAwIBAgIMFo3gINaZLHjisEcbMA0GCSqGSIb3DQEBCwUAMCIxIDAe
-    BgNVBAMTF2FwaXNlcnZlci1hZ2dyZWdhdG9yLWNhMB4XDTIxMDYzMDA0NTExMloX
-    DTMxMDYzMDA0NTExMlowIjEgMB4GA1UEAxMXYXBpc2VydmVyLWFnZ3JlZ2F0b3It
-    Y2EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAyyE71AOU3go5XFegLQ6fidI0LhhM
-    x7CzpTzh2xWKcHUfbNI7itgJvC/+GlyG5W+DF5V7ba0IJiQLsFve0oLdewIDAQAB
-    o0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-    ALfqF5ZmfqvqORuJIFilZYKF3d0wDQYJKoZIhvcNAQELBQADQQAHAomFKsF4jvYX
-    WM/UzQXDj9nSAFTf8dBPCXyZZNotsOH7+P6W4mMiuVs8bAuGiXGUdbsQ2lpiT/Rk
-    CzMeMdr4
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBgjCCASygAwIBAgIMFo3gM0nxQpiX/agfMA0GCSqGSIb3DQEBCwUAMCIxIDAe
-    BgNVBAMTF2FwaXNlcnZlci1hZ2dyZWdhdG9yLWNhMB4XDTIxMDYzMDA0NTIzMVoX
-    DTMxMDYzMDA0NTIzMVowIjEgMB4GA1UEAxMXYXBpc2VydmVyLWFnZ3JlZ2F0b3It
-    Y2EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAyyE71AOU3go5XFegLQ6fidI0LhhM
-    x7CzpTzh2xWKcHUfbNI7itgJvC/+GlyG5W+DF5V7ba0IJiQLsFve0oLdewIDAQAB
-    o0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-    ALfqF5ZmfqvqORuJIFilZYKF3d0wDQYJKoZIhvcNAQELBQADQQCXsoezoxXu2CEN
-    QdlXZOfmBT6cqxIX/RMHXhpHwRiqPsTO8IO2bVA8CSzxNwMuSv/ZtrMHoh8+PcVW
-    HLtkTXH8
-    -----END CERTIFICATE-----
-  etcd-clients-ca: |
-    -----BEGIN CERTIFICATE-----
-    MIIBcjCCARygAwIBAgIMFo1ogHnr26DL9YkqMA0GCSqGSIb3DQEBCwUAMBoxGDAW
-    BgNVBAMTD2V0Y2QtY2xpZW50cy1jYTAeFw0yMTA2MjgxNjE5MDFaFw0zMTA2Mjgx
-    NjE5MDFaMBoxGDAWBgNVBAMTD2V0Y2QtY2xpZW50cy1jYTBcMA0GCSqGSIb3DQEB
-    AQUAA0sAMEgCQQDYlt4Xx03Cp8QooPrloaVWznx9aQDSpl1UsrDyoBPNEElOLWep
-    uPaQBHiDLL8LwzGi7G9r+ib13tKrwprnlPv7AgMBAAGjQjBAMA4GA1UdDwEB/wQE
-    AwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjlt4Ue54AbJPWlDpRM51s
-    x+PeBDANBgkqhkiG9w0BAQsFAANBAAZAdf8ROEVkr3Rf7I+s+CQOil2toadlKWOY
-    qCeJ2XaEROfp9aUTEIU1MGM3g57MPyAPPU7mURskuOQz6B1UFaY=
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBcjCCARygAwIBAgIMFo1olfBnC/CsT+dqMA0GCSqGSIb3DQEBCwUAMBoxGDAW
-    BgNVBAMTD2V0Y2QtY2xpZW50cy1jYTAeFw0yMTA2MjgxNjIwMzNaFw0zMTA2Mjgx
-    NjIwMzNaMBoxGDAWBgNVBAMTD2V0Y2QtY2xpZW50cy1jYTBcMA0GCSqGSIb3DQEB
-    AQUAA0sAMEgCQQDYlt4Xx03Cp8QooPrloaVWznx9aQDSpl1UsrDyoBPNEElOLWep
-    uPaQBHiDLL8LwzGi7G9r+ib13tKrwprnlPv7AgMBAAGjQjBAMA4GA1UdDwEB/wQE
-    AwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjlt4Ue54AbJPWlDpRM51s
-    x+PeBDANBgkqhkiG9w0BAQsFAANBAF1xUz77PlUVUnd9duF8F7plou0TONC9R6/E
-    YQ8C6vM1b+9NSDGjCW8YmwEU2fBgskb/BBX2lwVZ32/RUEju4Co=
-    -----END CERTIFICATE-----
-  etcd-manager-ca-events: |
-    -----BEGIN CERTIFICATE-----
-    MIIBgDCCASqgAwIBAgIMFo+bKjm04vB4rNtaMA0GCSqGSIb3DQEBCwUAMCExHzAd
-    BgNVBAMTFmV0Y2QtbWFuYWdlci1jYS1ldmVudHMwHhcNMjEwNzA1MjAwOTU2WhcN
-    MzEwNzA1MjAwOTU2WjAhMR8wHQYDVQQDExZldGNkLW1hbmFnZXItY2EtZXZlbnRz
-    MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKiC8tndMlEFZ7qzeKxeKqFVjaYpsh/H
-    g7RxWo15+1kgH3suO0lxp9+RxSVv97hnsfbySTPZVhy2cIQj7eZtZt8CAwEAAaNC
-    MEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFBg6
-    CEZkQNnRkARBwFce03AEWa+sMA0GCSqGSIb3DQEBCwUAA0EAJMnBThok/uUe8q8O
-    sS5q19KUuE8YCTUzMDj36EBKf6NX4NoakCa1h6kfQVtlMtEIMWQZCjbm8xGK5ffs
-    GS/VUw==
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBgDCCASqgAwIBAgIMFo+bQ+EgIiBmGghjMA0GCSqGSIb3DQEBCwUAMCExHzAd
-    BgNVBAMTFmV0Y2QtbWFuYWdlci1jYS1ldmVudHMwHhcNMjEwNzA1MjAxMTQ2WhcN
-    MzEwNzA1MjAxMTQ2WjAhMR8wHQYDVQQDExZldGNkLW1hbmFnZXItY2EtZXZlbnRz
-    MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKFhHVVxxDGv8d1jBvtdSxz7KIVoBOjL
-    DMxsmTsINiQkTQaFlb+XPlnY1ar4+RhE519AFUkqfhypk4Zxqf1YFXUCAwEAAaNC
-    MEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNuW
-    LLH5c8kDubDbr6BHgedW0iJ9MA0GCSqGSIb3DQEBCwUAA0EAiKUoBoaGu7XzboFE
-    hjfKlX0TujqWuW3qMxDEJwj4dVzlSLrAoB/G01MJ+xxYKh456n48aG6N827UPXhV
-    cPfVNg==
-    -----END CERTIFICATE-----
-  etcd-manager-ca-main: |
-    -----BEGIN CERTIFICATE-----
-    MIIBfDCCASagAwIBAgIMFo+bKjm1c3jfv6hIMA0GCSqGSIb3DQEBCwUAMB8xHTAb
-    BgNVBAMTFGV0Y2QtbWFuYWdlci1jYS1tYWluMB4XDTIxMDcwNTIwMDk1NloXDTMx
-    MDcwNTIwMDk1NlowHzEdMBsGA1UEAxMUZXRjZC1tYW5hZ2VyLWNhLW1haW4wXDAN
-    BgkqhkiG9w0BAQEFAANLADBIAkEAxbkDbGYmCSShpRG3r+lzTOFujyuruRfjOhYm
-    ZRX4w1Utd5y63dUc98sjc9GGUYMHd+0k1ql/a48tGhnK6N6jJwIDAQABo0IwQDAO
-    BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWZLkbBFx
-    GAgPU4i62c52unSo7RswDQYJKoZIhvcNAQELBQADQQAj6Pgd0va/8FtkyMlnohLu
-    Gf4v8RJO6zk3Y6jJ4+cwWziipFM1ielMzSOZfFcCZgH3m5Io40is4hPSqyq2TOA6
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBfDCCASagAwIBAgIMFo+bQ+Eg8Si30gr4MA0GCSqGSIb3DQEBCwUAMB8xHTAb
-    BgNVBAMTFGV0Y2QtbWFuYWdlci1jYS1tYWluMB4XDTIxMDcwNTIwMTE0NloXDTMx
-    MDcwNTIwMTE0NlowHzEdMBsGA1UEAxMUZXRjZC1tYW5hZ2VyLWNhLW1haW4wXDAN
-    BgkqhkiG9w0BAQEFAANLADBIAkEAw33jzcd/iosN04b0WXbDt7B0c3sJ3aafcGLP
-    vG3xRB9N5bYr9+qZAq3mzAFkxscn4j1ce5b1/GKTDEAClmZgdQIDAQABo0IwQDAO
-    BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUE/h+3gDP
-    DvKwHRyiYlXM8voZ1wowDQYJKoZIhvcNAQELBQADQQBXuimeEoAOu5HN4hG7NqL9
-    t40K3ZRhRZv3JQWnRVJCBDjg1rD0GQJR/n+DoWvbeijI5C9pNjr2pWSIYR1eYCvd
-    -----END CERTIFICATE-----
-  etcd-peers-ca-events: |
-    -----BEGIN CERTIFICATE-----
-    MIIBfDCCASagAwIBAgIMFo+bKjmxTPh3/lYJMA0GCSqGSIb3DQEBCwUAMB8xHTAb
-    BgNVBAMTFGV0Y2QtcGVlcnMtY2EtZXZlbnRzMB4XDTIxMDcwNTIwMDk1NloXDTMx
-    MDcwNTIwMDk1NlowHzEdMBsGA1UEAxMUZXRjZC1wZWVycy1jYS1ldmVudHMwXDAN
-    BgkqhkiG9w0BAQEFAANLADBIAkEAv5g4HF2xmrYyouJfY9jXx1M3gPLD/pupvxPY
-    xyjJw5pNCy5M5XGS3iTqRD5RDE0fWudVHFZKLIe8WPc06NApXwIDAQABo0IwQDAO
-    BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUf6xiDI+O
-    Yph1ziCGr2hZaQYt+fUwDQYJKoZIhvcNAQELBQADQQBBxj5hqEQstonTb8lnqeGB
-    DEYtUeAk4eR/HzvUMjF52LVGuvN3XVt+JTrFeKNvb6/RDUbBNRj3azalcUkpPh6V
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBfDCCASagAwIBAgIMFo+bQ+Eq69jgzpKwMA0GCSqGSIb3DQEBCwUAMB8xHTAb
-    BgNVBAMTFGV0Y2QtcGVlcnMtY2EtZXZlbnRzMB4XDTIxMDcwNTIwMTE0NloXDTMx
-    MDcwNTIwMTE0NlowHzEdMBsGA1UEAxMUZXRjZC1wZWVycy1jYS1ldmVudHMwXDAN
-    BgkqhkiG9w0BAQEFAANLADBIAkEAo5Nj2CjX1qp3mEPw1H5nHAFWLoGNSLSlRFJW
-    03NxaNPMFzL5PrCoyOXrX8/MWczuZYw0Crf8EPOOQWi2+W0XLwIDAQABo0IwQDAO
-    BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUxauhhKQh
-    cvdZND78rHe0RQVTTiswDQYJKoZIhvcNAQELBQADQQB+cq4jIS9q0zXslaRa+ViI
-    J+dviA3sMygbmSJO0s4DxYmoazKJblux5q0ASSvS9iL1l9ShuZ1dWyp2tpZawHyb
-    -----END CERTIFICATE-----
-  etcd-peers-ca-main: |
-    -----BEGIN CERTIFICATE-----
-    MIIBeDCCASKgAwIBAgIMFo+bKjmuLDDLcDHsMA0GCSqGSIb3DQEBCwUAMB0xGzAZ
-    BgNVBAMTEmV0Y2QtcGVlcnMtY2EtbWFpbjAeFw0yMTA3MDUyMDA5NTZaFw0zMTA3
-    MDUyMDA5NTZaMB0xGzAZBgNVBAMTEmV0Y2QtcGVlcnMtY2EtbWFpbjBcMA0GCSqG
-    SIb3DQEBAQUAA0sAMEgCQQCyRaXWpwgN6INQqws9p/BvPElJv2Rno9dVTFhlQqDA
-    aUJXe7MBmiO4NJcW76EozeBh5ztR3/4NE1FM2x8TisS3AgMBAAGjQjBAMA4GA1Ud
-    DwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtE1d49uSvpURf
-    OQ25Vlu6liY20DANBgkqhkiG9w0BAQsFAANBAAgLVaetJZcfOA3OIMMvQbz2Ydrt
-    uWF9BKkIad8jrcIrm3IkOtR8bKGmDIIaRKuG/ZUOL6NMe2fky3AAfKwleL4=
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBeDCCASKgAwIBAgIMFo+bQ+EuVthBfuZvMA0GCSqGSIb3DQEBCwUAMB0xGzAZ
-    BgNVBAMTEmV0Y2QtcGVlcnMtY2EtbWFpbjAeFw0yMTA3MDUyMDExNDZaFw0zMTA3
-    MDUyMDExNDZaMB0xGzAZBgNVBAMTEmV0Y2QtcGVlcnMtY2EtbWFpbjBcMA0GCSqG
-    SIb3DQEBAQUAA0sAMEgCQQCxNbycDZNx5V1ZOiXxZSvaFpHRwKeHDfcuMUitdoPt
-    naVMlMTGDWAMuCVmFHFAWohIYynemEegmZkZ15S7AErfAgMBAAGjQjBAMA4GA1Ud
-    DwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAjQ8T4HclPIsC
-    qipEfUIcLP6jqTANBgkqhkiG9w0BAQsFAANBAJdZ17TN3HlWrH7HQgfR12UBwz8K
-    G9DurDznVaBVUYaHY8Sg5AvAXeb+yIF2JMmRR+bK+/G1QYY2D3/P31Ic2Oo=
-    -----END CERTIFICATE-----
-  kubernetes-ca: |
-    -----BEGIN CERTIFICATE-----
-    MIIBbjCCARigAwIBAgIMFpANqBD8NSD82AUSMA0GCSqGSIb3DQEBCwUAMBgxFjAU
-    BgNVBAMTDWt1YmVybmV0ZXMtY2EwHhcNMjEwNzA3MDcwODAwWhcNMzEwNzA3MDcw
-    ODAwWjAYMRYwFAYDVQQDEw1rdWJlcm5ldGVzLWNhMFwwDQYJKoZIhvcNAQEBBQAD
-    SwAwSAJBANFI3zr0Tk8krsW8vwjfMpzJOlWQ8616vG3YPa2qAgI7V4oKwfV0yIg1
-    jt+H6f4P/wkPAPTPTfRp9Iy8oHEEFw0CAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEG
-    MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNG3zVjTcLlJwDsJ4/K9DV7KohUA
-    MA0GCSqGSIb3DQEBCwUAA0EAB8d03fY2w7WKpfO29qI295pu2C4ca9AiVGOpgSc8
-    tmQsq6rcxt3T+rb589PVtz0mw/cKTxOk6gH2CCC+yHfy2w==
-    -----END CERTIFICATE-----
-    -----BEGIN CERTIFICATE-----
-    MIIBbjCCARigAwIBAgIMFpANvmSa0OAlYmXKMA0GCSqGSIb3DQEBCwUAMBgxFjAU
-    BgNVBAMTDWt1YmVybmV0ZXMtY2EwHhcNMjEwNzA3MDcwOTM2WhcNMzEwNzA3MDcw
-    OTM2WjAYMRYwFAYDVQQDEw1rdWJlcm5ldGVzLWNhMFwwDQYJKoZIhvcNAQEBBQAD
-    SwAwSAJBAMF6F4aZdpe0RUpyykaBpWwZCnwbffhYGOw+fs6RdLuUq7QCNmJm/Eq7
-    WWOziMYDiI9SbclpD+6QiJ0N3EqppVUCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEG
-    MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFLImp6ARjPDAH6nhI+scWVt3Q9bn
-    MA0GCSqGSIb3DQEBCwUAA0EAVQVx5MUtuAIeePuP9o51xtpT2S6Fvfi8J4ICxnlA
-    9B7UD2ushcVFPtaeoL9Gfu8aY4KJBeqqg5ojl4qmRnThjw==
-    -----END CERTIFICATE-----
-ClusterName: minimal.example.com
-ControlPlaneConfig:
-  KubeControllerManager:
-    allocateNodeCIDRs: true
-    attachDetachReconcileSyncPeriod: 1m0s
-    cloudProvider: external
-    clusterCIDR: 172.20.128.0/17
-    clusterName: minimal.example.com
-    configureCloudRoutes: false
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
-    leaderElection:
-      leaderElect: true
-    logLevel: 2
-    useServiceAccountCredentials: true
-  KubeScheduler:
-    featureGates:
-      CSIMigrationAWS: "true"
-      InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
-    leaderElection:
-      leaderElect: true
-    logLevel: 2
-DNSZone: Z1AFAKE1ZON3YO
-DefaultMachineType: m3.medium
-EtcdClusterNames:
-- main
-- events
-FileAssets:
-- content: |
-    apiVersion: kubescheduler.config.k8s.io/v1beta2
-    clientConnection:
-      kubeconfig: /var/lib/kube-scheduler/kubeconfig
-    kind: KubeSchedulerConfiguration
-  path: /var/lib/kube-scheduler/config.yaml
-Hooks:
-- null
-- null
-KeypairIDs:
-  apiserver-aggregator-ca: "6980187172486667078076483355"
-  etcd-clients-ca: "6979622252718071085282986282"
-  etcd-manager-ca-events: "6982279354000777253151890266"
-  etcd-manager-ca-main: "6982279354000936168671127624"
-  etcd-peers-ca-events: "6982279353999767935825892873"
-  etcd-peers-ca-main: "6982279353998887468930183660"
-  kubernetes-ca: "6982820025135291416230495506"
-  service-account: "2"
-KubeProxy:
-  cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
-  logLevel: 2
-KubeletConfig:
-  anonymousAuth: false
-  cgroupDriver: systemd
-  cgroupRoot: /
-  cloudProvider: external
-  clusterDNS: 100.64.0.10
-  clusterDomain: cluster.local
-  enableDebuggingHandlers: true
-  evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
-  featureGates:
-    CSIMigrationAWS: "true"
-    InTreePluginAWSUnregister: "true"
-  kubeconfigPath: /var/lib/kubelet/kubeconfig
-  logLevel: 2
-  nodeLabels:
-    kops.k8s.io/kops-controller-pki: ""
-    node-role.kubernetes.io/control-plane: ""
-    node.kubernetes.io/exclude-from-external-load-balancers: ""
-  podInfraContainerImage: registry.k8s.io/pause:3.9
-  podManifestPath: /etc/kubernetes/manifests
-  protectKernelDefaults: true
-  registerSchedulable: true
-  shutdownGracePeriod: 0s
-  shutdownGracePeriodCriticalPods: 0s
-  taints:
-  - node-role.kubernetes.io/control-plane=:NoSchedule
-KubernetesVersion: 1.24.0
-Networking:
-  amazonVPC: {}
-  nonMasqueradeCIDR: 172.20.0.0/16
-  serviceClusterIPRange: 100.64.0.0/13
-UpdatePolicy: automatic
-channels:
-- memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
-configStore:
-  keypairs: memfs://clusters.example.com/minimal.example.com/pki
-  secrets: memfs://clusters.example.com/minimal.example.com/secrets
-containerdConfig:
-  logLevel: info
-  runc:
-    version: 1.1.5
-  version: 1.6.20
-etcdManifests:
-- memfs://clusters.example.com/minimal.example.com/manifests/etcd/main-master-us-test-1a.yaml
-- memfs://clusters.example.com/minimal.example.com/manifests/etcd/events-master-us-test-1a.yaml
-staticManifests:
-- key: kube-apiserver-healthcheck
-  path: manifests/static/kube-apiserver-healthcheck.yaml
-usesLegacyGossip: false
-usesNoneDNS: false
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-nodes_content b/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-nodes_content
deleted file mode 100644
index e2f58f669f666..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_nodeupconfig-nodes_content
+++ /dev/null
@@ -1,64 +0,0 @@
-Assets:
-  amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
-  - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
-  - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
-  arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
-  - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
-  - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
-CAs: {}
-ClusterName: minimal.example.com
-DefaultMachineType: t2.medium
-Hooks:
-- null
-- null
-KeypairIDs:
-  kubernetes-ca: "6982820025135291416230495506"
-KubeProxy:
-  cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
-  logLevel: 2
-KubeletConfig:
-  anonymousAuth: false
-  cgroupDriver: systemd
-  cgroupRoot: /
-  cloudProvider: external
-  clusterDNS: 100.64.0.10
-  clusterDomain: cluster.local
-  enableDebuggingHandlers: true
-  evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
-  featureGates:
-    CSIMigrationAWS: "true"
-    InTreePluginAWSUnregister: "true"
-  kubeconfigPath: /var/lib/kubelet/kubeconfig
-  logLevel: 2
-  nodeLabels:
-    node-role.kubernetes.io/node: ""
-  podInfraContainerImage: registry.k8s.io/pause:3.9
-  podManifestPath: /etc/kubernetes/manifests
-  protectKernelDefaults: true
-  registerSchedulable: true
-  shutdownGracePeriod: 0s
-  shutdownGracePeriodCriticalPods: 0s
-KubernetesVersion: 1.24.0
-Networking:
-  amazonVPC: {}
-  nonMasqueradeCIDR: 172.20.0.0/16
-  serviceClusterIPRange: 100.64.0.0/13
-UpdatePolicy: automatic
-containerdConfig:
-  logLevel: info
-  runc:
-    version: 1.1.5
-  version: 1.6.20
-usesLegacyGossip: false
-usesNoneDNS: false
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/in-v1alpha2.yaml b/tests/integration/update_cluster/many-addons-ccm-irsa24/in-v1alpha2.yaml
deleted file mode 100644
index 8e6fdfcdad9ed..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/in-v1alpha2.yaml
+++ /dev/null
@@ -1,95 +0,0 @@
-apiVersion: kops.k8s.io/v1alpha2
-kind: Cluster
-metadata:
-  creationTimestamp: "2016-12-10T22:42:27Z"
-  name: minimal.example.com
-spec:
-  awsLoadBalancerController:
-    enabled: true
-  certManager:
-    enabled: true
-  clusterAutoscaler:
-    enabled: true
-  metricsServer:
-    enabled: true
-  kubernetesApiAccess:
-  - 0.0.0.0/0
-  channel: stable
-  cloudConfig:
-    awsEBSCSIDriver:
-      enabled: true
-  cloudControllerManager:
-    cloudProvider: aws
-  cloudProvider: aws
-  configBase: memfs://clusters.example.com/minimal.example.com
-  etcdClusters:
-  - etcdMembers:
-    - instanceGroup: master-us-test-1a
-      name: us-test-1a
-    name: main
-  - etcdMembers:
-    - instanceGroup: master-us-test-1a
-      name: us-test-1a
-    name: events
-  iam:
-    useServiceAccountExternalPermissions: true
-  kubelet:
-    anonymousAuth: false
-  kubernetesVersion: v1.24.0
-  masterPublicName: api.minimal.example.com
-  networkCIDR: 172.20.0.0/16
-  networking:
-    amazonvpc: {}
-  nodeTerminationHandler:
-    enabled: true
-  nonMasqueradeCIDR: 172.20.0.0/16
-  serviceAccountIssuerDiscovery:
-    discoveryStore: memfs://discovery.example.com/minimal.example.com
-    enableAWSOIDCProvider: true
-  snapshotController:
-    enabled: true
-  sshAccess:
-    - 0.0.0.0/0
-  subnets:
-  - cidr: 172.20.32.0/19
-    name: us-test-1a
-    type: Public
-    zone: us-test-1a
-
----
-
-apiVersion: kops.k8s.io/v1alpha2
-kind: InstanceGroup
-metadata:
-  creationTimestamp: "2016-12-10T22:42:28Z"
-  name: nodes
-  labels:
-    kops.k8s.io/cluster: minimal.example.com
-spec:
-  associatePublicIp: true
-  image: ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-20220404
-  machineType: t2.medium
-  maxSize: 2
-  minSize: 2
-  role: Node
-  subnets:
-  - us-test-1a
-
----
-
-apiVersion: kops.k8s.io/v1alpha2
-kind: InstanceGroup
-metadata:
-  creationTimestamp: "2016-12-10T22:42:28Z"
-  name: master-us-test-1a
-  labels:
-    kops.k8s.io/cluster: minimal.example.com
-spec:
-  associatePublicIp: true
-  image: ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-20220404
-  machineType: m3.medium
-  maxSize: 1
-  minSize: 1
-  role: Master
-  subnets:
-  - us-test-1a
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/kubernetes.tf b/tests/integration/update_cluster/many-addons-ccm-irsa24/kubernetes.tf
deleted file mode 100644
index 312922f21005f..0000000000000
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/kubernetes.tf
+++ /dev/null
@@ -1,1213 +0,0 @@
-locals {
-  cluster_name                                       = "minimal.example.com"
-  iam_openid_connect_provider_arn                    = aws_iam_openid_connect_provider.minimal-example-com.arn
-  iam_openid_connect_provider_issuer                 = "discovery.example.com/minimal.example.com"
-  kube-system-aws-cloud-controller-manager_role_arn  = aws_iam_role.aws-cloud-controller-manager-kube-system-sa-minimal-example-com.arn
-  kube-system-aws-cloud-controller-manager_role_name = aws_iam_role.aws-cloud-controller-manager-kube-system-sa-minimal-example-com.name
-  kube-system-aws-load-balancer-controller_role_arn  = aws_iam_role.aws-load-balancer-controller-kube-system-sa-minimal-example-com.arn
-  kube-system-aws-load-balancer-controller_role_name = aws_iam_role.aws-load-balancer-controller-kube-system-sa-minimal-example-com.name
-  kube-system-aws-node-termination-handler_role_arn  = aws_iam_role.aws-node-termination-handler-kube-system-sa-minimal-example-com.arn
-  kube-system-aws-node-termination-handler_role_name = aws_iam_role.aws-node-termination-handler-kube-system-sa-minimal-example-com.name
-  kube-system-cluster-autoscaler_role_arn            = aws_iam_role.cluster-autoscaler-kube-system-sa-minimal-example-com.arn
-  kube-system-cluster-autoscaler_role_name           = aws_iam_role.cluster-autoscaler-kube-system-sa-minimal-example-com.name
-  kube-system-dns-controller_role_arn                = aws_iam_role.dns-controller-kube-system-sa-minimal-example-com.arn
-  kube-system-dns-controller_role_name               = aws_iam_role.dns-controller-kube-system-sa-minimal-example-com.name
-  kube-system-ebs-csi-controller-sa_role_arn         = aws_iam_role.ebs-csi-controller-sa-kube-system-sa-minimal-example-com.arn
-  kube-system-ebs-csi-controller-sa_role_name        = aws_iam_role.ebs-csi-controller-sa-kube-system-sa-minimal-example-com.name
-  master_autoscaling_group_ids                       = [aws_autoscaling_group.master-us-test-1a-masters-minimal-example-com.id]
-  master_security_group_ids                          = [aws_security_group.masters-minimal-example-com.id]
-  masters_role_arn                                   = aws_iam_role.masters-minimal-example-com.arn
-  masters_role_name                                  = aws_iam_role.masters-minimal-example-com.name
-  node_autoscaling_group_ids                         = [aws_autoscaling_group.nodes-minimal-example-com.id]
-  node_security_group_ids                            = [aws_security_group.nodes-minimal-example-com.id]
-  node_subnet_ids                                    = [aws_subnet.us-test-1a-minimal-example-com.id]
-  nodes_role_arn                                     = aws_iam_role.nodes-minimal-example-com.arn
-  nodes_role_name                                    = aws_iam_role.nodes-minimal-example-com.name
-  region                                             = "us-test-1"
-  route_table_public_id                              = aws_route_table.minimal-example-com.id
-  subnet_us-test-1a_id                               = aws_subnet.us-test-1a-minimal-example-com.id
-  vpc_cidr_block                                     = aws_vpc.minimal-example-com.cidr_block
-  vpc_id                                             = aws_vpc.minimal-example-com.id
-  vpc_ipv6_cidr_block                                = aws_vpc.minimal-example-com.ipv6_cidr_block
-  vpc_ipv6_cidr_length                               = local.vpc_ipv6_cidr_block == "" ? null : tonumber(regex(".*/(\\d+)", local.vpc_ipv6_cidr_block)[0])
-}
-
-output "cluster_name" {
-  value = "minimal.example.com"
-}
-
-output "iam_openid_connect_provider_arn" {
-  value = aws_iam_openid_connect_provider.minimal-example-com.arn
-}
-
-output "iam_openid_connect_provider_issuer" {
-  value = "discovery.example.com/minimal.example.com"
-}
-
-output "kube-system-aws-cloud-controller-manager_role_arn" {
-  value = aws_iam_role.aws-cloud-controller-manager-kube-system-sa-minimal-example-com.arn
-}
-
-output "kube-system-aws-cloud-controller-manager_role_name" {
-  value = aws_iam_role.aws-cloud-controller-manager-kube-system-sa-minimal-example-com.name
-}
-
-output "kube-system-aws-load-balancer-controller_role_arn" {
-  value = aws_iam_role.aws-load-balancer-controller-kube-system-sa-minimal-example-com.arn
-}
-
-output "kube-system-aws-load-balancer-controller_role_name" {
-  value = aws_iam_role.aws-load-balancer-controller-kube-system-sa-minimal-example-com.name
-}
-
-output "kube-system-aws-node-termination-handler_role_arn" {
-  value = aws_iam_role.aws-node-termination-handler-kube-system-sa-minimal-example-com.arn
-}
-
-output "kube-system-aws-node-termination-handler_role_name" {
-  value = aws_iam_role.aws-node-termination-handler-kube-system-sa-minimal-example-com.name
-}
-
-output "kube-system-cluster-autoscaler_role_arn" {
-  value = aws_iam_role.cluster-autoscaler-kube-system-sa-minimal-example-com.arn
-}
-
-output "kube-system-cluster-autoscaler_role_name" {
-  value = aws_iam_role.cluster-autoscaler-kube-system-sa-minimal-example-com.name
-}
-
-output "kube-system-dns-controller_role_arn" {
-  value = aws_iam_role.dns-controller-kube-system-sa-minimal-example-com.arn
-}
-
-output "kube-system-dns-controller_role_name" {
-  value = aws_iam_role.dns-controller-kube-system-sa-minimal-example-com.name
-}
-
-output "kube-system-ebs-csi-controller-sa_role_arn" {
-  value = aws_iam_role.ebs-csi-controller-sa-kube-system-sa-minimal-example-com.arn
-}
-
-output "kube-system-ebs-csi-controller-sa_role_name" {
-  value = aws_iam_role.ebs-csi-controller-sa-kube-system-sa-minimal-example-com.name
-}
-
-output "master_autoscaling_group_ids" {
-  value = [aws_autoscaling_group.master-us-test-1a-masters-minimal-example-com.id]
-}
-
-output "master_security_group_ids" {
-  value = [aws_security_group.masters-minimal-example-com.id]
-}
-
-output "masters_role_arn" {
-  value = aws_iam_role.masters-minimal-example-com.arn
-}
-
-output "masters_role_name" {
-  value = aws_iam_role.masters-minimal-example-com.name
-}
-
-output "node_autoscaling_group_ids" {
-  value = [aws_autoscaling_group.nodes-minimal-example-com.id]
-}
-
-output "node_security_group_ids" {
-  value = [aws_security_group.nodes-minimal-example-com.id]
-}
-
-output "node_subnet_ids" {
-  value = [aws_subnet.us-test-1a-minimal-example-com.id]
-}
-
-output "nodes_role_arn" {
-  value = aws_iam_role.nodes-minimal-example-com.arn
-}
-
-output "nodes_role_name" {
-  value = aws_iam_role.nodes-minimal-example-com.name
-}
-
-output "region" {
-  value = "us-test-1"
-}
-
-output "route_table_public_id" {
-  value = aws_route_table.minimal-example-com.id
-}
-
-output "subnet_us-test-1a_id" {
-  value = aws_subnet.us-test-1a-minimal-example-com.id
-}
-
-output "vpc_cidr_block" {
-  value = aws_vpc.minimal-example-com.cidr_block
-}
-
-output "vpc_id" {
-  value = aws_vpc.minimal-example-com.id
-}
-
-output "vpc_ipv6_cidr_block" {
-  value = aws_vpc.minimal-example-com.ipv6_cidr_block
-}
-
-output "vpc_ipv6_cidr_length" {
-  value = local.vpc_ipv6_cidr_block == "" ? null : tonumber(regex(".*/(\\d+)", local.vpc_ipv6_cidr_block)[0])
-}
-
-provider "aws" {
-  region = "us-test-1"
-}
-
-provider "aws" {
-  alias  = "files"
-  region = "us-test-1"
-}
-
-resource "aws_autoscaling_group" "master-us-test-1a-masters-minimal-example-com" {
-  enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"]
-  launch_template {
-    id      = aws_launch_template.master-us-test-1a-masters-minimal-example-com.id
-    version = aws_launch_template.master-us-test-1a-masters-minimal-example-com.latest_version
-  }
-  max_instance_lifetime = 0
-  max_size              = 1
-  metrics_granularity   = "1Minute"
-  min_size              = 1
-  name                  = "master-us-test-1a.masters.minimal.example.com"
-  protect_from_scale_in = false
-  tag {
-    key                 = "KubernetesCluster"
-    propagate_at_launch = true
-    value               = "minimal.example.com"
-  }
-  tag {
-    key                 = "Name"
-    propagate_at_launch = true
-    value               = "master-us-test-1a.masters.minimal.example.com"
-  }
-  tag {
-    key                 = "aws-node-termination-handler/managed"
-    propagate_at_launch = true
-    value               = ""
-  }
-  tag {
-    key                 = "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki"
-    propagate_at_launch = true
-    value               = ""
-  }
-  tag {
-    key                 = "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane"
-    propagate_at_launch = true
-    value               = ""
-  }
-  tag {
-    key                 = "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers"
-    propagate_at_launch = true
-    value               = ""
-  }
-  tag {
-    key                 = "k8s.io/role/control-plane"
-    propagate_at_launch = true
-    value               = "1"
-  }
-  tag {
-    key                 = "k8s.io/role/master"
-    propagate_at_launch = true
-    value               = "1"
-  }
-  tag {
-    key                 = "kops.k8s.io/instancegroup"
-    propagate_at_launch = true
-    value               = "master-us-test-1a"
-  }
-  tag {
-    key                 = "kubernetes.io/cluster/minimal.example.com"
-    propagate_at_launch = true
-    value               = "owned"
-  }
-  vpc_zone_identifier = [aws_subnet.us-test-1a-minimal-example-com.id]
-}
-
-resource "aws_autoscaling_group" "nodes-minimal-example-com" {
-  enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"]
-  launch_template {
-    id      = aws_launch_template.nodes-minimal-example-com.id
-    version = aws_launch_template.nodes-minimal-example-com.latest_version
-  }
-  max_instance_lifetime = 0
-  max_size              = 2
-  metrics_granularity   = "1Minute"
-  min_size              = 2
-  name                  = "nodes.minimal.example.com"
-  protect_from_scale_in = false
-  tag {
-    key                 = "KubernetesCluster"
-    propagate_at_launch = true
-    value               = "minimal.example.com"
-  }
-  tag {
-    key                 = "Name"
-    propagate_at_launch = true
-    value               = "nodes.minimal.example.com"
-  }
-  tag {
-    key                 = "aws-node-termination-handler/managed"
-    propagate_at_launch = true
-    value               = ""
-  }
-  tag {
-    key                 = "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node"
-    propagate_at_launch = true
-    value               = ""
-  }
-  tag {
-    key                 = "k8s.io/role/node"
-    propagate_at_launch = true
-    value               = "1"
-  }
-  tag {
-    key                 = "kops.k8s.io/instancegroup"
-    propagate_at_launch = true
-    value               = "nodes"
-  }
-  tag {
-    key                 = "kubernetes.io/cluster/minimal.example.com"
-    propagate_at_launch = true
-    value               = "owned"
-  }
-  vpc_zone_identifier = [aws_subnet.us-test-1a-minimal-example-com.id]
-}
-
-resource "aws_autoscaling_lifecycle_hook" "master-us-test-1a-NTHLifecycleHook" {
-  autoscaling_group_name = aws_autoscaling_group.master-us-test-1a-masters-minimal-example-com.id
-  default_result         = "CONTINUE"
-  heartbeat_timeout      = 300
-  lifecycle_transition   = "autoscaling:EC2_INSTANCE_TERMINATING"
-  name                   = "master-us-test-1a-NTHLifecycleHook"
-}
-
-resource "aws_autoscaling_lifecycle_hook" "nodes-NTHLifecycleHook" {
-  autoscaling_group_name = aws_autoscaling_group.nodes-minimal-example-com.id
-  default_result         = "CONTINUE"
-  heartbeat_timeout      = 300
-  lifecycle_transition   = "autoscaling:EC2_INSTANCE_TERMINATING"
-  name                   = "nodes-NTHLifecycleHook"
-}
-
-resource "aws_cloudwatch_event_rule" "minimal-example-com-ASGLifecycle" {
-  event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern")
-  name          = "minimal.example.com-ASGLifecycle"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com-ASGLifecycle"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_cloudwatch_event_rule" "minimal-example-com-InstanceScheduledChange" {
-  event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern")
-  name          = "minimal.example.com-InstanceScheduledChange"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com-InstanceScheduledChange"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_cloudwatch_event_rule" "minimal-example-com-InstanceStateChange" {
-  event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern")
-  name          = "minimal.example.com-InstanceStateChange"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com-InstanceStateChange"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_cloudwatch_event_rule" "minimal-example-com-SpotInterruption" {
-  event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern")
-  name          = "minimal.example.com-SpotInterruption"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com-SpotInterruption"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_cloudwatch_event_target" "minimal-example-com-ASGLifecycle-Target" {
-  arn  = aws_sqs_queue.minimal-example-com-nth.arn
-  rule = aws_cloudwatch_event_rule.minimal-example-com-ASGLifecycle.id
-}
-
-resource "aws_cloudwatch_event_target" "minimal-example-com-InstanceScheduledChange-Target" {
-  arn  = aws_sqs_queue.minimal-example-com-nth.arn
-  rule = aws_cloudwatch_event_rule.minimal-example-com-InstanceScheduledChange.id
-}
-
-resource "aws_cloudwatch_event_target" "minimal-example-com-InstanceStateChange-Target" {
-  arn  = aws_sqs_queue.minimal-example-com-nth.arn
-  rule = aws_cloudwatch_event_rule.minimal-example-com-InstanceStateChange.id
-}
-
-resource "aws_cloudwatch_event_target" "minimal-example-com-SpotInterruption-Target" {
-  arn  = aws_sqs_queue.minimal-example-com-nth.arn
-  rule = aws_cloudwatch_event_rule.minimal-example-com-SpotInterruption.id
-}
-
-resource "aws_ebs_volume" "us-test-1a-etcd-events-minimal-example-com" {
-  availability_zone = "us-test-1a"
-  encrypted         = false
-  iops              = 3000
-  size              = 20
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "us-test-1a.etcd-events.minimal.example.com"
-    "k8s.io/etcd/events"                        = "us-test-1a/us-test-1a"
-    "k8s.io/role/control-plane"                 = "1"
-    "k8s.io/role/master"                        = "1"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-  throughput = 125
-  type       = "gp3"
-}
-
-resource "aws_ebs_volume" "us-test-1a-etcd-main-minimal-example-com" {
-  availability_zone = "us-test-1a"
-  encrypted         = false
-  iops              = 3000
-  size              = 20
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "us-test-1a.etcd-main.minimal.example.com"
-    "k8s.io/etcd/main"                          = "us-test-1a/us-test-1a"
-    "k8s.io/role/control-plane"                 = "1"
-    "k8s.io/role/master"                        = "1"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-  throughput = 125
-  type       = "gp3"
-}
-
-resource "aws_iam_instance_profile" "masters-minimal-example-com" {
-  name = "masters.minimal.example.com"
-  role = aws_iam_role.masters-minimal-example-com.name
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "masters.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_iam_instance_profile" "nodes-minimal-example-com" {
-  name = "nodes.minimal.example.com"
-  role = aws_iam_role.nodes-minimal-example-com.name
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "nodes.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_iam_openid_connect_provider" "minimal-example-com" {
-  client_id_list = ["amazonaws.com"]
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-  thumbprint_list = ["9e99a48a9960b14926bb7f3b02e22da2b0ab7280", "a9d53002e97e00e043244f3d170d6f4c414104fd"]
-  url             = "https://discovery.example.com/minimal.example.com"
-}
-
-resource "aws_iam_role" "aws-cloud-controller-manager-kube-system-sa-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy")
-  name               = "aws-cloud-controller-manager.kube-system.sa.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "aws-cloud-controller-manager.kube-system.sa.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "service-account.kops.k8s.io/name"          = "aws-cloud-controller-manager"
-    "service-account.kops.k8s.io/namespace"     = "kube-system"
-  }
-}
-
-resource "aws_iam_role" "aws-load-balancer-controller-kube-system-sa-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy")
-  name               = "aws-load-balancer-controller.kube-system.sa.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "aws-load-balancer-controller.kube-system.sa.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "service-account.kops.k8s.io/name"          = "aws-load-balancer-controller"
-    "service-account.kops.k8s.io/namespace"     = "kube-system"
-  }
-}
-
-resource "aws_iam_role" "aws-node-termination-handler-kube-system-sa-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy")
-  name               = "aws-node-termination-handler.kube-system.sa.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "aws-node-termination-handler.kube-system.sa.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "service-account.kops.k8s.io/name"          = "aws-node-termination-handler"
-    "service-account.kops.k8s.io/namespace"     = "kube-system"
-  }
-}
-
-resource "aws_iam_role" "cluster-autoscaler-kube-system-sa-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_cluster-autoscaler.kube-system.sa.minimal.example.com_policy")
-  name               = "cluster-autoscaler.kube-system.sa.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "cluster-autoscaler.kube-system.sa.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "service-account.kops.k8s.io/name"          = "cluster-autoscaler"
-    "service-account.kops.k8s.io/namespace"     = "kube-system"
-  }
-}
-
-resource "aws_iam_role" "dns-controller-kube-system-sa-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_dns-controller.kube-system.sa.minimal.example.com_policy")
-  name               = "dns-controller.kube-system.sa.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "dns-controller.kube-system.sa.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "service-account.kops.k8s.io/name"          = "dns-controller"
-    "service-account.kops.k8s.io/namespace"     = "kube-system"
-  }
-}
-
-resource "aws_iam_role" "ebs-csi-controller-sa-kube-system-sa-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy")
-  name               = "ebs-csi-controller-sa.kube-system.sa.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "ebs-csi-controller-sa.kube-system.sa.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "service-account.kops.k8s.io/name"          = "ebs-csi-controller-sa"
-    "service-account.kops.k8s.io/namespace"     = "kube-system"
-  }
-}
-
-resource "aws_iam_role" "masters-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_masters.minimal.example.com_policy")
-  name               = "masters.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "masters.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_iam_role" "nodes-minimal-example-com" {
-  assume_role_policy = file("${path.module}/data/aws_iam_role_nodes.minimal.example.com_policy")
-  name               = "nodes.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "nodes.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_iam_role_policy" "aws-cloud-controller-manager-kube-system-sa-minimal-example-com" {
-  name   = "aws-cloud-controller-manager.kube-system.sa.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_aws-cloud-controller-manager.kube-system.sa.minimal.example.com_policy")
-  role   = aws_iam_role.aws-cloud-controller-manager-kube-system-sa-minimal-example-com.name
-}
-
-resource "aws_iam_role_policy" "aws-load-balancer-controller-kube-system-sa-minimal-example-com" {
-  name   = "aws-load-balancer-controller.kube-system.sa.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_aws-load-balancer-controller.kube-system.sa.minimal.example.com_policy")
-  role   = aws_iam_role.aws-load-balancer-controller-kube-system-sa-minimal-example-com.name
-}
-
-resource "aws_iam_role_policy" "aws-node-termination-handler-kube-system-sa-minimal-example-com" {
-  name   = "aws-node-termination-handler.kube-system.sa.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_aws-node-termination-handler.kube-system.sa.minimal.example.com_policy")
-  role   = aws_iam_role.aws-node-termination-handler-kube-system-sa-minimal-example-com.name
-}
-
-resource "aws_iam_role_policy" "cluster-autoscaler-kube-system-sa-minimal-example-com" {
-  name   = "cluster-autoscaler.kube-system.sa.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_cluster-autoscaler.kube-system.sa.minimal.example.com_policy")
-  role   = aws_iam_role.cluster-autoscaler-kube-system-sa-minimal-example-com.name
-}
-
-resource "aws_iam_role_policy" "dns-controller-kube-system-sa-minimal-example-com" {
-  name   = "dns-controller.kube-system.sa.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_dns-controller.kube-system.sa.minimal.example.com_policy")
-  role   = aws_iam_role.dns-controller-kube-system-sa-minimal-example-com.name
-}
-
-resource "aws_iam_role_policy" "ebs-csi-controller-sa-kube-system-sa-minimal-example-com" {
-  name   = "ebs-csi-controller-sa.kube-system.sa.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_ebs-csi-controller-sa.kube-system.sa.minimal.example.com_policy")
-  role   = aws_iam_role.ebs-csi-controller-sa-kube-system-sa-minimal-example-com.name
-}
-
-resource "aws_iam_role_policy" "masters-minimal-example-com" {
-  name   = "masters.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_masters.minimal.example.com_policy")
-  role   = aws_iam_role.masters-minimal-example-com.name
-}
-
-resource "aws_iam_role_policy" "nodes-minimal-example-com" {
-  name   = "nodes.minimal.example.com"
-  policy = file("${path.module}/data/aws_iam_role_policy_nodes.minimal.example.com_policy")
-  role   = aws_iam_role.nodes-minimal-example-com.name
-}
-
-resource "aws_internet_gateway" "minimal-example-com" {
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-  vpc_id = aws_vpc.minimal-example-com.id
-}
-
-resource "aws_key_pair" "kubernetes-minimal-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157" {
-  key_name   = "kubernetes.minimal.example.com-c4:a6:ed:9a:a8:89:b9:e2:c3:9c:d6:63:eb:9c:71:57"
-  public_key = file("${path.module}/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key")
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_launch_template" "master-us-test-1a-masters-minimal-example-com" {
-  block_device_mappings {
-    device_name = "/dev/xvda"
-    ebs {
-      delete_on_termination = true
-      encrypted             = true
-      iops                  = 3000
-      throughput            = 125
-      volume_size           = 64
-      volume_type           = "gp3"
-    }
-  }
-  block_device_mappings {
-    device_name  = "/dev/sdc"
-    virtual_name = "ephemeral0"
-  }
-  iam_instance_profile {
-    name = aws_iam_instance_profile.masters-minimal-example-com.id
-  }
-  image_id      = "ami-12345678"
-  instance_type = "m3.medium"
-  key_name      = aws_key_pair.kubernetes-minimal-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id
-  lifecycle {
-    create_before_destroy = true
-  }
-  metadata_options {
-    http_endpoint               = "enabled"
-    http_protocol_ipv6          = "disabled"
-    http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
-  }
-  monitoring {
-    enabled = false
-  }
-  name = "master-us-test-1a.masters.minimal.example.com"
-  network_interfaces {
-    associate_public_ip_address = true
-    delete_on_termination       = true
-    ipv6_address_count          = 0
-    security_groups             = [aws_security_group.masters-minimal-example-com.id]
-  }
-  tag_specifications {
-    resource_type = "instance"
-    tags = {
-      "KubernetesCluster"                                                                                     = "minimal.example.com"
-      "Name"                                                                                                  = "master-us-test-1a.masters.minimal.example.com"
-      "aws-node-termination-handler/managed"                                                                  = ""
-      "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki"                         = ""
-      "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane"                   = ""
-      "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = ""
-      "k8s.io/role/control-plane"                                                                             = "1"
-      "k8s.io/role/master"                                                                                    = "1"
-      "kops.k8s.io/instancegroup"                                                                             = "master-us-test-1a"
-      "kubernetes.io/cluster/minimal.example.com"                                                             = "owned"
-    }
-  }
-  tag_specifications {
-    resource_type = "volume"
-    tags = {
-      "KubernetesCluster"                                                                                     = "minimal.example.com"
-      "Name"                                                                                                  = "master-us-test-1a.masters.minimal.example.com"
-      "aws-node-termination-handler/managed"                                                                  = ""
-      "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki"                         = ""
-      "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane"                   = ""
-      "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = ""
-      "k8s.io/role/control-plane"                                                                             = "1"
-      "k8s.io/role/master"                                                                                    = "1"
-      "kops.k8s.io/instancegroup"                                                                             = "master-us-test-1a"
-      "kubernetes.io/cluster/minimal.example.com"                                                             = "owned"
-    }
-  }
-  tags = {
-    "KubernetesCluster"                                                                                     = "minimal.example.com"
-    "Name"                                                                                                  = "master-us-test-1a.masters.minimal.example.com"
-    "aws-node-termination-handler/managed"                                                                  = ""
-    "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki"                         = ""
-    "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane"                   = ""
-    "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = ""
-    "k8s.io/role/control-plane"                                                                             = "1"
-    "k8s.io/role/master"                                                                                    = "1"
-    "kops.k8s.io/instancegroup"                                                                             = "master-us-test-1a"
-    "kubernetes.io/cluster/minimal.example.com"                                                             = "owned"
-  }
-  user_data = filebase64("${path.module}/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data")
-}
-
-resource "aws_launch_template" "nodes-minimal-example-com" {
-  block_device_mappings {
-    device_name = "/dev/xvda"
-    ebs {
-      delete_on_termination = true
-      encrypted             = true
-      iops                  = 3000
-      throughput            = 125
-      volume_size           = 128
-      volume_type           = "gp3"
-    }
-  }
-  iam_instance_profile {
-    name = aws_iam_instance_profile.nodes-minimal-example-com.id
-  }
-  image_id      = "ami-12345678"
-  instance_type = "t2.medium"
-  key_name      = aws_key_pair.kubernetes-minimal-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id
-  lifecycle {
-    create_before_destroy = true
-  }
-  metadata_options {
-    http_endpoint               = "enabled"
-    http_protocol_ipv6          = "disabled"
-    http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
-  }
-  monitoring {
-    enabled = false
-  }
-  name = "nodes.minimal.example.com"
-  network_interfaces {
-    associate_public_ip_address = true
-    delete_on_termination       = true
-    ipv6_address_count          = 0
-    security_groups             = [aws_security_group.nodes-minimal-example-com.id]
-  }
-  tag_specifications {
-    resource_type = "instance"
-    tags = {
-      "KubernetesCluster"                                                          = "minimal.example.com"
-      "Name"                                                                       = "nodes.minimal.example.com"
-      "aws-node-termination-handler/managed"                                       = ""
-      "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = ""
-      "k8s.io/role/node"                                                           = "1"
-      "kops.k8s.io/instancegroup"                                                  = "nodes"
-      "kubernetes.io/cluster/minimal.example.com"                                  = "owned"
-    }
-  }
-  tag_specifications {
-    resource_type = "volume"
-    tags = {
-      "KubernetesCluster"                                                          = "minimal.example.com"
-      "Name"                                                                       = "nodes.minimal.example.com"
-      "aws-node-termination-handler/managed"                                       = ""
-      "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = ""
-      "k8s.io/role/node"                                                           = "1"
-      "kops.k8s.io/instancegroup"                                                  = "nodes"
-      "kubernetes.io/cluster/minimal.example.com"                                  = "owned"
-    }
-  }
-  tags = {
-    "KubernetesCluster"                                                          = "minimal.example.com"
-    "Name"                                                                       = "nodes.minimal.example.com"
-    "aws-node-termination-handler/managed"                                       = ""
-    "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = ""
-    "k8s.io/role/node"                                                           = "1"
-    "kops.k8s.io/instancegroup"                                                  = "nodes"
-    "kubernetes.io/cluster/minimal.example.com"                                  = "owned"
-  }
-  user_data = filebase64("${path.module}/data/aws_launch_template_nodes.minimal.example.com_user_data")
-}
-
-resource "aws_route" "route-0-0-0-0--0" {
-  destination_cidr_block = "0.0.0.0/0"
-  gateway_id             = aws_internet_gateway.minimal-example-com.id
-  route_table_id         = aws_route_table.minimal-example-com.id
-}
-
-resource "aws_route" "route-__--0" {
-  destination_ipv6_cidr_block = "::/0"
-  gateway_id                  = aws_internet_gateway.minimal-example-com.id
-  route_table_id              = aws_route_table.minimal-example-com.id
-}
-
-resource "aws_route_table" "minimal-example-com" {
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "kubernetes.io/kops/role"                   = "public"
-  }
-  vpc_id = aws_vpc.minimal-example-com.id
-}
-
-resource "aws_route_table_association" "us-test-1a-minimal-example-com" {
-  route_table_id = aws_route_table.minimal-example-com.id
-  subnet_id      = aws_subnet.us-test-1a-minimal-example-com.id
-}
-
-resource "aws_s3_object" "cluster-completed-spec" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_cluster-completed.spec_content")
-  key                    = "clusters.example.com/minimal.example.com/cluster-completed.spec"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "discovery-json" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_discovery.json_content")
-  key                    = "discovery.example.com/minimal.example.com/.well-known/openid-configuration"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "etcd-cluster-spec-events" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_etcd-cluster-spec-events_content")
-  key                    = "clusters.example.com/minimal.example.com/backups/etcd/events/control/etcd-cluster-spec"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "etcd-cluster-spec-main" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_etcd-cluster-spec-main_content")
-  key                    = "clusters.example.com/minimal.example.com/backups/etcd/main/control/etcd-cluster-spec"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "keys-json" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_keys.json_content")
-  key                    = "discovery.example.com/minimal.example.com/openid/v1/jwks"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "kops-version-txt" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_kops-version.txt_content")
-  key                    = "clusters.example.com/minimal.example.com/kops-version.txt"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "manifests-etcdmanager-events-master-us-test-1a" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content")
-  key                    = "clusters.example.com/minimal.example.com/manifests/etcd/events-master-us-test-1a.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "manifests-etcdmanager-main-master-us-test-1a" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content")
-  key                    = "clusters.example.com/minimal.example.com/manifests/etcd/main-master-us-test-1a.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "manifests-static-kube-apiserver-healthcheck" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content")
-  key                    = "clusters.example.com/minimal.example.com/manifests/static/kube-apiserver-healthcheck.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-aws-cloud-controller-addons-k8s-io-k8s-1-18" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-aws-ebs-csi-driver-addons-k8s-io-k8s-1-17" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-aws-load-balancer-controller-addons-k8s-io-k8s-1-19" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-aws-load-balancer-controller.addons.k8s.io-k8s-1.19_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/aws-load-balancer-controller.addons.k8s.io/k8s-1.19.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-bootstrap" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-bootstrap_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-certmanager-io-k8s-1-16" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/certmanager.io/k8s-1.16.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-cluster-autoscaler-addons-k8s-io-k8s-1-15" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-cluster-autoscaler.addons.k8s.io-k8s-1.15_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/cluster-autoscaler.addons.k8s.io/k8s-1.15.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-coredns-addons-k8s-io-k8s-1-12" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/coredns.addons.k8s.io/k8s-1.12.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-dns-controller-addons-k8s-io-k8s-1-12" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/dns-controller.addons.k8s.io/k8s-1.12.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-kops-controller-addons-k8s-io-k8s-1-16" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/kops-controller.addons.k8s.io/k8s-1.16.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-kubelet-api-rbac-addons-k8s-io-k8s-1-9" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/kubelet-api.rbac.addons.k8s.io/k8s-1.9.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-leader-migration-rbac-addons-k8s-io-k8s-1-23" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-limit-range-addons-k8s-io" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/limit-range.addons.k8s.io/v1.5.0.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-metrics-server-addons-k8s-io-k8s-1-11" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-metrics-server.addons.k8s.io-k8s-1.11_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/metrics-server.addons.k8s.io/k8s-1.11.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-networking-amazon-vpc-routed-eni-k8s-1-16" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-networking.amazon-vpc-routed-eni-k8s-1.16_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/networking.amazon-vpc-routed-eni/k8s-1.16.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-node-termination-handler-aws-k8s-1-11" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/node-termination-handler.aws/k8s-1.11.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-snapshot-controller-addons-k8s-io-k8s-1-20" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-snapshot-controller.addons.k8s.io-k8s-1.20_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/snapshot-controller.addons.k8s.io/k8s-1.20.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "minimal-example-com-addons-storage-aws-addons-k8s-io-v1-15-0" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/storage-aws.addons.k8s.io/v1.15.0.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "nodeupconfig-master-us-test-1a" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_nodeupconfig-master-us-test-1a_content")
-  key                    = "clusters.example.com/minimal.example.com/igconfig/control-plane/master-us-test-1a/nodeupconfig.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_s3_object" "nodeupconfig-nodes" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_nodeupconfig-nodes_content")
-  key                    = "clusters.example.com/minimal.example.com/igconfig/node/nodes/nodeupconfig.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
-resource "aws_security_group" "masters-minimal-example-com" {
-  description = "Security group for masters"
-  name        = "masters.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "masters.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-  vpc_id = aws_vpc.minimal-example-com.id
-}
-
-resource "aws_security_group" "nodes-minimal-example-com" {
-  description = "Security group for nodes"
-  name        = "nodes.minimal.example.com"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "nodes.minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-  vpc_id = aws_vpc.minimal-example-com.id
-}
-
-resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-22to22-masters-minimal-example-com" {
-  cidr_blocks       = ["0.0.0.0/0"]
-  from_port         = 22
-  protocol          = "tcp"
-  security_group_id = aws_security_group.masters-minimal-example-com.id
-  to_port           = 22
-  type              = "ingress"
-}
-
-resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-22to22-nodes-minimal-example-com" {
-  cidr_blocks       = ["0.0.0.0/0"]
-  from_port         = 22
-  protocol          = "tcp"
-  security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port           = 22
-  type              = "ingress"
-}
-
-resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-443to443-masters-minimal-example-com" {
-  cidr_blocks       = ["0.0.0.0/0"]
-  from_port         = 443
-  protocol          = "tcp"
-  security_group_id = aws_security_group.masters-minimal-example-com.id
-  to_port           = 443
-  type              = "ingress"
-}
-
-resource "aws_security_group_rule" "from-masters-minimal-example-com-egress-all-0to0-0-0-0-0--0" {
-  cidr_blocks       = ["0.0.0.0/0"]
-  from_port         = 0
-  protocol          = "-1"
-  security_group_id = aws_security_group.masters-minimal-example-com.id
-  to_port           = 0
-  type              = "egress"
-}
-
-resource "aws_security_group_rule" "from-masters-minimal-example-com-egress-all-0to0-__--0" {
-  from_port         = 0
-  ipv6_cidr_blocks  = ["::/0"]
-  protocol          = "-1"
-  security_group_id = aws_security_group.masters-minimal-example-com.id
-  to_port           = 0
-  type              = "egress"
-}
-
-resource "aws_security_group_rule" "from-masters-minimal-example-com-ingress-all-0to0-masters-minimal-example-com" {
-  from_port                = 0
-  protocol                 = "-1"
-  security_group_id        = aws_security_group.masters-minimal-example-com.id
-  source_security_group_id = aws_security_group.masters-minimal-example-com.id
-  to_port                  = 0
-  type                     = "ingress"
-}
-
-resource "aws_security_group_rule" "from-masters-minimal-example-com-ingress-all-0to0-nodes-minimal-example-com" {
-  from_port                = 0
-  protocol                 = "-1"
-  security_group_id        = aws_security_group.nodes-minimal-example-com.id
-  source_security_group_id = aws_security_group.masters-minimal-example-com.id
-  to_port                  = 0
-  type                     = "ingress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-egress-all-0to0-0-0-0-0--0" {
-  cidr_blocks       = ["0.0.0.0/0"]
-  from_port         = 0
-  protocol          = "-1"
-  security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port           = 0
-  type              = "egress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-egress-all-0to0-__--0" {
-  from_port         = 0
-  ipv6_cidr_blocks  = ["::/0"]
-  protocol          = "-1"
-  security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port           = 0
-  type              = "egress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-ingress-all-0to0-masters-minimal-example-com" {
-  from_port                = 0
-  protocol                 = "-1"
-  security_group_id        = aws_security_group.masters-minimal-example-com.id
-  source_security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port                  = 0
-  type                     = "ingress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-ingress-all-0to0-nodes-minimal-example-com" {
-  from_port                = 0
-  protocol                 = "-1"
-  security_group_id        = aws_security_group.nodes-minimal-example-com.id
-  source_security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port                  = 0
-  type                     = "ingress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-ingress-tcp-1to2379-masters-minimal-example-com" {
-  from_port                = 1
-  protocol                 = "tcp"
-  security_group_id        = aws_security_group.masters-minimal-example-com.id
-  source_security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port                  = 2379
-  type                     = "ingress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-ingress-tcp-2382to4000-masters-minimal-example-com" {
-  from_port                = 2382
-  protocol                 = "tcp"
-  security_group_id        = aws_security_group.masters-minimal-example-com.id
-  source_security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port                  = 4000
-  type                     = "ingress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-ingress-tcp-4003to65535-masters-minimal-example-com" {
-  from_port                = 4003
-  protocol                 = "tcp"
-  security_group_id        = aws_security_group.masters-minimal-example-com.id
-  source_security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port                  = 65535
-  type                     = "ingress"
-}
-
-resource "aws_security_group_rule" "from-nodes-minimal-example-com-ingress-udp-1to65535-masters-minimal-example-com" {
-  from_port                = 1
-  protocol                 = "udp"
-  security_group_id        = aws_security_group.masters-minimal-example-com.id
-  source_security_group_id = aws_security_group.nodes-minimal-example-com.id
-  to_port                  = 65535
-  type                     = "ingress"
-}
-
-resource "aws_sqs_queue" "minimal-example-com-nth" {
-  message_retention_seconds = 300
-  name                      = "minimal-example-com-nth"
-  policy                    = file("${path.module}/data/aws_sqs_queue_minimal-example-com-nth_policy")
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal-example-com-nth"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_subnet" "us-test-1a-minimal-example-com" {
-  availability_zone                           = "us-test-1a"
-  cidr_block                                  = "172.20.32.0/19"
-  enable_resource_name_dns_a_record_on_launch = true
-  private_dns_hostname_type_on_launch         = "resource-name"
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "us-test-1a.minimal.example.com"
-    "SubnetType"                                = "Public"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-    "kubernetes.io/role/elb"                    = "1"
-    "kubernetes.io/role/internal-elb"           = "1"
-  }
-  vpc_id = aws_vpc.minimal-example-com.id
-}
-
-resource "aws_vpc" "minimal-example-com" {
-  assign_generated_ipv6_cidr_block = true
-  cidr_block                       = "172.20.0.0/16"
-  enable_dns_hostnames             = true
-  enable_dns_support               = true
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_vpc_dhcp_options" "minimal-example-com" {
-  domain_name         = "us-test-1.compute.internal"
-  domain_name_servers = ["AmazonProvidedDNS"]
-  tags = {
-    "KubernetesCluster"                         = "minimal.example.com"
-    "Name"                                      = "minimal.example.com"
-    "kubernetes.io/cluster/minimal.example.com" = "owned"
-  }
-}
-
-resource "aws_vpc_dhcp_options_association" "minimal-example-com" {
-  dhcp_options_id = aws_vpc_dhcp_options.minimal-example-com.id
-  vpc_id          = aws_vpc.minimal-example-com.id
-}
-
-terraform {
-  required_version = ">= 0.15.0"
-  required_providers {
-    aws = {
-      "configuration_aliases" = [aws.files]
-      "source"                = "hashicorp/aws"
-      "version"               = ">= 5.0.0"
-    }
-  }
-}
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 79227fdaee21b..406ca6b1f3fce 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
+    manifestHash: 3950a960f29504cc3130b24f5a50281c88365ead305750886dedfaaf4cbd63cd
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 0322368ae45b7..e0f311486d676 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 32f88692354d6..bed6d57f733f5 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
+    manifestHash: 3950a960f29504cc3130b24f5a50281c88365ead305750886dedfaaf4cbd63cd
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 0322368ae45b7..e0f311486d676 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index c25de82cea629..82d603ced8d72 100644
--- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index 38d99acafaba8..c87211832b57b 100644
--- a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index 807836cc807b0..84af0f1aa74db 100644
--- a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index e5b7b802a94ff..150467ea32859 100644
--- a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: bc6a297db252d1d3dc650c6464bb3182d2e3786f4693ab750948874ed857edd0
+    manifestHash: 770499a775a853f45283a259c4b7c335a77afc19e35e70afb8c0fb86d7856364
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index c1a6035271f29..0ecd5caddf7c4 100644
--- a/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/many-addons-gce/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 8d90f29bc5205..0f935164e951d 100644
--- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index c8780ec866421..fc72eaa544417 100644
--- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content
index d742a58cae535..1aaa19f4cfb49 100644
--- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 4f6b1185bc8cc3e5a5cd59954fc966250115a5c6c87c8561e88e9c254f7a5cb1
+    manifestHash: 46ee128bb3270d50d01d814e227093c59bd618c4482700f1eb0b491011ba18a5
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index ef6b565016105..b4d8e772b20e4 100644
--- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern b/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern
deleted file mode 100644
index c8db9dbe9c41b..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern
+++ /dev/null
@@ -1 +0,0 @@
-{"source":["aws.autoscaling"],"detail-type":["EC2 Instance-terminate Lifecycle Action"]}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern b/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern
deleted file mode 100644
index fb4ea7defdc52..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern
+++ /dev/null
@@ -1 +0,0 @@
-{"source": ["aws.health"],"detail-type": ["AWS Health Event"],"detail": {"service": ["EC2"],"eventTypeCategory": ["scheduledChange"]}}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern b/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern
deleted file mode 100644
index 8c2916419dc7d..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern
+++ /dev/null
@@ -1 +0,0 @@
-{"source": ["aws.ec2"],"detail-type": ["EC2 Instance State-change Notification"]}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern b/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern
deleted file mode 100644
index 2d0e83b4164b2..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern
+++ /dev/null
@@ -1 +0,0 @@
-{"source": ["aws.ec2"],"detail-type": ["EC2 Spot Instance Interruption Warning"]}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_masters.minimal.example.com_policy b/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_masters.minimal.example.com_policy
deleted file mode 100644
index 66d5de1d5ae1e..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_masters.minimal.example.com_policy
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Principal": { "Service": "ec2.amazonaws.com"},
-      "Action": "sts:AssumeRole"
-    }
-  ]
-}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_nodes.minimal.example.com_policy b/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_nodes.minimal.example.com_policy
deleted file mode 100644
index 66d5de1d5ae1e..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_nodes.minimal.example.com_policy
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Principal": { "Service": "ec2.amazonaws.com"},
-      "Action": "sts:AssumeRole"
-    }
-  ]
-}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key b/tests/integration/update_cluster/minimal-1.24/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key
deleted file mode 100644
index 81cb0127830e7..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key
+++ /dev/null
@@ -1 +0,0 @@
-ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCtWu40XQo8dczLsCq0OWV+hxm9uV3WxeH9Kgh4sMzQxNtoU1pvW0XdjpkBesRKGoolfWeCLXWxpyQb1IaiMkKoz7MdhQ/6UKjMjP66aFWWp3pwD0uj0HuJ7tq4gKHKRYGTaZIRWpzUiANBrjugVgA+Sd7E/mYwc/DMXkIyRZbvhQ==
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-events_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-events_content
deleted file mode 100644
index 5a36c3ebf46dc..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-events_content
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "memberCount": 1,
-  "etcdVersion": "3.5.13"
-}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-main_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-main_content
deleted file mode 100644
index 5a36c3ebf46dc..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_etcd-cluster-spec-main_content
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "memberCount": 1,
-  "etcdVersion": "3.5.13"
-}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_kops-version.txt_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_kops-version.txt_content
deleted file mode 100644
index b7340298dcdd5..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_kops-version.txt_content
+++ /dev/null
@@ -1 +0,0 @@
-1.21.0-alpha.1
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
deleted file mode 100644
index ad4af21f68751..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ /dev/null
@@ -1,33 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  creationTimestamp: null
-spec:
-  containers:
-  - args:
-    - --ca-cert=/secrets/ca.crt
-    - --client-cert=/secrets/client.crt
-    - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
-    livenessProbe:
-      httpGet:
-        host: 127.0.0.1
-        path: /.kube-apiserver-healthcheck/healthz
-        port: 3990
-      initialDelaySeconds: 5
-      timeoutSeconds: 5
-    name: healthcheck
-    resources: {}
-    securityContext:
-      runAsNonRoot: true
-      runAsUser: 10012
-    volumeMounts:
-    - mountPath: /secrets
-      name: healthcheck-secrets
-      readOnly: true
-  volumes:
-  - hostPath:
-      path: /etc/kubernetes/kube-apiserver-healthcheck/secrets
-      type: Directory
-    name: healthcheck-secrets
-status: {}
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content
deleted file mode 100644
index 13cd1906d4112..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content
+++ /dev/null
@@ -1,383 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-    kubernetes.io/cluster-service: "true"
-  name: coredns
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-    kubernetes.io/bootstrapping: rbac-defaults
-  name: system:coredns
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  - services
-  - pods
-  - namespaces
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - discovery.k8s.io
-  resources:
-  - endpointslices
-  verbs:
-  - list
-  - watch
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  annotations:
-    rbac.authorization.kubernetes.io/autoupdate: "true"
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-    kubernetes.io/bootstrapping: rbac-defaults
-  name: system:coredns
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:coredns
-subjects:
-- kind: ServiceAccount
-  name: coredns
-  namespace: kube-system
-
----
-
-apiVersion: v1
-data:
-  Corefile: |-
-    .:53 {
-        errors
-        health {
-          lameduck 5s
-        }
-        ready
-        kubernetes cluster.local. in-addr.arpa ip6.arpa {
-          pods insecure
-          fallthrough in-addr.arpa ip6.arpa
-          ttl 30
-        }
-        prometheus :9153
-        forward . /etc/resolv.conf {
-          max_concurrent 1000
-        }
-        cache 30
-        loop
-        reload
-        loadbalance
-    }
-kind: ConfigMap
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    addonmanager.kubernetes.io/mode: EnsureExists
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-  name: coredns
-  namespace: kube-system
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-    k8s-app: kube-dns
-    kubernetes.io/cluster-service: "true"
-    kubernetes.io/name: CoreDNS
-  name: coredns
-  namespace: kube-system
-spec:
-  selector:
-    matchLabels:
-      k8s-app: kube-dns
-  strategy:
-    rollingUpdate:
-      maxSurge: 10%
-      maxUnavailable: 1
-    type: RollingUpdate
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        k8s-app: kube-dns
-        kops.k8s.io/managed-by: kops
-    spec:
-      containers:
-      - args:
-        - -conf
-        - /etc/coredns/Corefile
-        image: registry.k8s.io/coredns/coredns:v1.11.1
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          failureThreshold: 5
-          httpGet:
-            path: /health
-            port: 8080
-            scheme: HTTP
-          initialDelaySeconds: 60
-          successThreshold: 1
-          timeoutSeconds: 5
-        name: coredns
-        ports:
-        - containerPort: 53
-          name: dns
-          protocol: UDP
-        - containerPort: 53
-          name: dns-tcp
-          protocol: TCP
-        - containerPort: 9153
-          name: metrics
-          protocol: TCP
-        readinessProbe:
-          httpGet:
-            path: /ready
-            port: 8181
-            scheme: HTTP
-        resources:
-          limits:
-            memory: 170Mi
-          requests:
-            cpu: 100m
-            memory: 70Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            add:
-            - NET_BIND_SERVICE
-            drop:
-            - all
-          readOnlyRootFilesystem: true
-        volumeMounts:
-        - mountPath: /etc/coredns
-          name: config-volume
-          readOnly: true
-      dnsPolicy: Default
-      nodeSelector:
-        kubernetes.io/os: linux
-      priorityClassName: system-cluster-critical
-      serviceAccountName: coredns
-      tolerations:
-      - key: CriticalAddonsOnly
-        operator: Exists
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            k8s-app: kube-dns
-        maxSkew: 1
-        topologyKey: topology.kubernetes.io/zone
-        whenUnsatisfiable: ScheduleAnyway
-      - labelSelector:
-          matchLabels:
-            k8s-app: kube-dns
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: ScheduleAnyway
-      volumes:
-      - configMap:
-          name: coredns
-        name: config-volume
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  annotations:
-    prometheus.io/port: "9153"
-    prometheus.io/scrape: "true"
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-    k8s-app: kube-dns
-    kubernetes.io/cluster-service: "true"
-    kubernetes.io/name: CoreDNS
-  name: kube-dns
-  namespace: kube-system
-  resourceVersion: "0"
-spec:
-  clusterIP: 100.64.0.10
-  ports:
-  - name: dns
-    port: 53
-    protocol: UDP
-  - name: dns-tcp
-    port: 53
-    protocol: TCP
-  - name: metrics
-    port: 9153
-    protocol: TCP
-  selector:
-    k8s-app: kube-dns
-
----
-
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-  name: kube-dns
-  namespace: kube-system
-spec:
-  maxUnavailable: 50%
-  selector:
-    matchLabels:
-      k8s-app: kube-dns
-
----
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-  name: coredns-autoscaler
-  namespace: kube-system
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-  name: coredns-autoscaler
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - replicationcontrollers/scale
-  verbs:
-  - get
-  - update
-- apiGroups:
-  - extensions
-  - apps
-  resources:
-  - deployments/scale
-  - replicasets/scale
-  verbs:
-  - get
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - create
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-  name: coredns-autoscaler
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: coredns-autoscaler
-subjects:
-- kind: ServiceAccount
-  name: coredns-autoscaler
-  namespace: kube-system
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: coredns.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: coredns.addons.k8s.io
-    k8s-app: coredns-autoscaler
-    kubernetes.io/cluster-service: "true"
-  name: coredns-autoscaler
-  namespace: kube-system
-spec:
-  selector:
-    matchLabels:
-      k8s-app: coredns-autoscaler
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        k8s-app: coredns-autoscaler
-        kops.k8s.io/managed-by: kops
-    spec:
-      containers:
-      - command:
-        - /cluster-proportional-autoscaler
-        - --namespace=kube-system
-        - --configmap=coredns-autoscaler
-        - --target=Deployment/coredns
-        - --default-params={"linear":{"coresPerReplica":256,"nodesPerReplica":16,"preventSinglePointFailure":true}}
-        - --logtostderr=true
-        - --v=2
-        image: registry.k8s.io/cpa/cluster-proportional-autoscaler:v1.8.9
-        name: autoscaler
-        resources:
-          requests:
-            cpu: 20m
-            memory: 10Mi
-      nodeSelector:
-        kubernetes.io/os: linux
-      priorityClassName: system-cluster-critical
-      serviceAccountName: coredns-autoscaler
-      tolerations:
-      - key: CriticalAddonsOnly
-        operator: Exists
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content
deleted file mode 100644
index 36761e1c56255..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: kubelet-api.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: kubelet-api.rbac.addons.k8s.io
-  name: kops:system:kubelet-api-admin
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:kubelet-api-admin
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: kubelet-api
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
deleted file mode 100644
index 11ed6d46fd241..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
+++ /dev/null
@@ -1,52 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cloud-provider-extraction-migration
-  resources:
-  - leases
-  verbs:
-  - create
-  - list
-  - get
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: system::leader-locking-migration
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:kube-controller-manager
-- kind: ServiceAccount
-  name: kube-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: cloud-controller-manager
-  namespace: kube-system
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content
deleted file mode 100644
index 4dcdce48b9ab9..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: LimitRange
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: limit-range.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: limit-range.addons.k8s.io
-  name: limits
-  namespace: default
-spec:
-  limits:
-  - defaultRequest:
-      cpu: 100m
-    type: Container
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content
deleted file mode 100644
index bea3e88be3ce7..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content
+++ /dev/null
@@ -1,118 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: storage-aws.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: storage-aws.addons.k8s.io
-  name: default
-parameters:
-  type: gp2
-provisioner: kubernetes.io/aws-ebs
-
----
-
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  annotations:
-    storageclass.kubernetes.io/is-default-class: "false"
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: storage-aws.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: storage-aws.addons.k8s.io
-  name: gp2
-parameters:
-  type: gp2
-provisioner: kubernetes.io/aws-ebs
-
----
-
-allowVolumeExpansion: true
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  annotations:
-    storageclass.kubernetes.io/is-default-class: "false"
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: storage-aws.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: storage-aws.addons.k8s.io
-  name: kops-ssd-1-17
-parameters:
-  encrypted: "true"
-  type: gp2
-provisioner: kubernetes.io/aws-ebs
-volumeBindingMode: WaitForFirstConsumer
-
----
-
-allowVolumeExpansion: true
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  annotations:
-    storageclass.kubernetes.io/is-default-class: "true"
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: storage-aws.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: storage-aws.addons.k8s.io
-  name: kops-csi-1-21
-parameters:
-  encrypted: "true"
-  type: gp3
-provisioner: ebs.csi.aws.com
-volumeBindingMode: WaitForFirstConsumer
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: storage-aws.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: storage-aws.addons.k8s.io
-  name: system:aws-cloud-provider
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: storage-aws.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: storage-aws.addons.k8s.io
-  name: system:aws-cloud-provider
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:aws-cloud-provider
-subjects:
-- kind: ServiceAccount
-  name: aws-cloud-provider
-  namespace: kube-system
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_nodeupconfig-nodes_content b/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_nodeupconfig-nodes_content
deleted file mode 100644
index 3da361a8cb2f0..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_nodeupconfig-nodes_content
+++ /dev/null
@@ -1,64 +0,0 @@
-Assets:
-  amd64:
-  - da575ceb7c44fddbe7d2514c16798f39f8c10e54b5dbef3bcee5ac547637db11@https://dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubelet
-  - 8a45348bdaf81d46caf1706c8bf95b3f431150554f47d444ffde89e8cdd712c1@https://dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
-  - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
-  - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
-  arm64:
-  - 6c04ae25ee9b434f40e0d2466eb4ef5604dc43f306ddf1e5f165fc9d3c521e12@https://dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubelet
-  - bdad4d3063ddb7bfa5ecf17fb8b029d5d81d7d4ea1650e4369aafa13ed97149a@https://dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
-  - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
-  - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
-CAs: {}
-ClusterName: minimal.example.com
-Hooks:
-- null
-- null
-KeypairIDs:
-  kubernetes-ca: "6982820025135291416230495506"
-KubeProxy:
-  clusterCIDR: 100.96.0.0/11
-  cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.3
-  logLevel: 2
-KubeletConfig:
-  anonymousAuth: false
-  cgroupDriver: systemd
-  cgroupRoot: /
-  cloudProvider: external
-  clusterDNS: 100.64.0.10
-  clusterDomain: cluster.local
-  enableDebuggingHandlers: true
-  evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
-  featureGates:
-    CSIMigrationAWS: "true"
-    InTreePluginAWSUnregister: "true"
-  kubeconfigPath: /var/lib/kubelet/kubeconfig
-  logLevel: 2
-  nodeLabels:
-    kops.k8s.io/instancegroup: nodes-us-test-1a
-    node-role.kubernetes.io/node: ""
-  podInfraContainerImage: registry.k8s.io/pause:3.9
-  podManifestPath: /etc/kubernetes/manifests
-  protectKernelDefaults: true
-  registerSchedulable: true
-  shutdownGracePeriod: 30s
-  shutdownGracePeriodCriticalPods: 10s
-KubernetesVersion: 1.24.3
-Networking:
-  nonMasqueradeCIDR: 100.64.0.0/10
-  serviceClusterIPRange: 100.64.0.0/13
-UpdatePolicy: automatic
-containerdConfig:
-  logLevel: info
-  runc:
-    version: 1.1.5
-  version: 1.6.20
-usesLegacyGossip: false
-usesNoneDNS: false
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_sqs_queue_minimal-example-com-nth_policy b/tests/integration/update_cluster/minimal-1.24/data/aws_sqs_queue_minimal-example-com-nth_policy
deleted file mode 100644
index c5b2b25812f36..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_sqs_queue_minimal-example-com-nth_policy
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "Statement": [
-    {
-      "Action": "sqs:SendMessage",
-      "Effect": "Allow",
-      "Principal": {
-        "Service": [
-          "events.amazonaws.com",
-          "sqs.amazonaws.com"
-        ]
-      },
-      "Resource": "arn:aws-test:sqs:us-test-1:123456789012:minimal-example-com-nth"
-    }
-  ],
-  "Version": "2012-10-17"
-}
diff --git a/tests/integration/update_cluster/minimal-1.24/id_rsa.pub b/tests/integration/update_cluster/minimal-1.24/id_rsa.pub
deleted file mode 100755
index 81cb0127830e7..0000000000000
--- a/tests/integration/update_cluster/minimal-1.24/id_rsa.pub
+++ /dev/null
@@ -1 +0,0 @@
-ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCtWu40XQo8dczLsCq0OWV+hxm9uV3WxeH9Kgh4sMzQxNtoU1pvW0XdjpkBesRKGoolfWeCLXWxpyQb1IaiMkKoz7MdhQ/6UKjMjP66aFWWp3pwD0uj0HuJ7tq4gKHKRYGTaZIRWpzUiANBrjugVgA+Sd7E/mYwc/DMXkIyRZbvhQ==
diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ef6f90d8bdcb0..e67c56556a126 100644
--- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9eccfbbaaef53..13491899dde55 100644
--- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 47882022379c7..b821c04e2e6a7 100644
--- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 67e6c2aa64b617934ffd0b51f8438673fb5c6ec47f454553b7a6cab93453fcbd
+    manifestHash: 32cff2afe6ce2186407e48b50966f7280c81e42a37ccd7c2ba56cd376b9fb8a7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f62c2574be36b..2f35afd7d7505 100644
--- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ef6f90d8bdcb0..e67c56556a126 100644
--- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9eccfbbaaef53..13491899dde55 100644
--- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 53467b61c7f7b..8652ec913634c 100644
--- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 67e6c2aa64b617934ffd0b51f8438673fb5c6ec47f454553b7a6cab93453fcbd
+    manifestHash: 32cff2afe6ce2186407e48b50966f7280c81e42a37ccd7c2ba56cd376b9fb8a7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f62c2574be36b..2f35afd7d7505 100644
--- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ef6f90d8bdcb0..e67c56556a126 100644
--- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9eccfbbaaef53..13491899dde55 100644
--- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 7b04489befaf1..b2601b9797988 100644
--- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 67e6c2aa64b617934ffd0b51f8438673fb5c6ec47f454553b7a6cab93453fcbd
+    manifestHash: 32cff2afe6ce2186407e48b50966f7280c81e42a37ccd7c2ba56cd376b9fb8a7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f62c2574be36b..2f35afd7d7505 100644
--- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ef6f90d8bdcb0..e67c56556a126 100644
--- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9eccfbbaaef53..13491899dde55 100644
--- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index fedc961453402..aff67fa2a242d 100644
--- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 67e6c2aa64b617934ffd0b51f8438673fb5c6ec47f454553b7a6cab93453fcbd
+    manifestHash: 32cff2afe6ce2186407e48b50966f7280c81e42a37ccd7c2ba56cd376b9fb8a7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f62c2574be36b..2f35afd7d7505 100644
--- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ef6f90d8bdcb0..e67c56556a126 100644
--- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9eccfbbaaef53..13491899dde55 100644
--- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 304d528bf91be..8d38c32546ff7 100644
--- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 67e6c2aa64b617934ffd0b51f8438673fb5c6ec47f454553b7a6cab93453fcbd
+    manifestHash: 32cff2afe6ce2186407e48b50966f7280c81e42a37ccd7c2ba56cd376b9fb8a7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f62c2574be36b..2f35afd7d7505 100644
--- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern b/tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern
rename to tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-ASGLifecycle_event_pattern
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern b/tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern
rename to tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceScheduledChange_event_pattern
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern b/tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern
rename to tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-InstanceStateChange_event_pattern
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern b/tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern
rename to tests/integration/update_cluster/minimal-1.30/data/aws_cloudwatch_event_rule_minimal.example.com-SpotInterruption_event_pattern
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_masters.minimal.example.com_policy b/tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_masters.minimal.example.com_policy
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_masters.minimal.example.com_policy
rename to tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_masters.minimal.example.com_policy
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_nodes.minimal.example.com_policy b/tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_nodes.minimal.example.com_policy
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_iam_role_nodes.minimal.example.com_policy
rename to tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_nodes.minimal.example.com_policy
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_policy_masters.minimal.example.com_policy b/tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_policy_masters.minimal.example.com_policy
similarity index 100%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_policy_masters.minimal.example.com_policy
rename to tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_policy_masters.minimal.example.com_policy
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_policy_nodes.minimal.example.com_policy b/tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_policy_nodes.minimal.example.com_policy
similarity index 100%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_iam_role_policy_nodes.minimal.example.com_policy
rename to tests/integration/update_cluster/minimal-1.30/data/aws_iam_role_policy_nodes.minimal.example.com_policy
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key b/tests/integration/update_cluster/minimal-1.30/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key
rename to tests/integration/update_cluster/minimal-1.30/data/aws_key_pair_kubernetes.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data b/tests/integration/update_cluster/minimal-1.30/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
similarity index 98%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
rename to tests/integration/update_cluster/minimal-1.30/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
index 7ad36253edebd..c066919d80081 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
@@ -130,7 +130,7 @@ ClusterName: minimal.example.com
 ConfigBase: memfs://tests/minimal.example.com
 InstanceGroupName: master-us-test-1a
 InstanceGroupRole: ControlPlane
-NodeupConfigHash: TALPGQ2j5bWDXYajj1lirmxAYZ87GTySsuEeVdMH8+k=
+NodeupConfigHash: wHWokJEjcB17XxgTwCTSUR2z+JxF8yuoYTzLjZBxReY=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_launch_template_nodes.minimal.example.com_user_data b/tests/integration/update_cluster/minimal-1.30/data/aws_launch_template_nodes.minimal.example.com_user_data
similarity index 98%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_launch_template_nodes.minimal.example.com_user_data
rename to tests/integration/update_cluster/minimal-1.30/data/aws_launch_template_nodes.minimal.example.com_user_data
index 92a812a9dac61..e6bffdf6a56fb 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_launch_template_nodes.minimal.example.com_user_data
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_launch_template_nodes.minimal.example.com_user_data
@@ -153,7 +153,7 @@ ConfigServer:
   - https://kops-controller.internal.minimal.example.com:3988/
 InstanceGroupName: nodes
 InstanceGroupRole: Node
-NodeupConfigHash: FKJsd2kX97C/VMxCvIGgf7A57VXnKHvc8AbgSNEQax4=
+NodeupConfigHash: /IzJWEx01mNFk+dgnzzk5ga/jQUyr7raE9v859Vpviw=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content
similarity index 92%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_cluster-completed.spec_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content
index f37df5359f97e..c399d647d54f4 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_cluster-completed.spec_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content
@@ -18,8 +18,7 @@ spec:
     clusterCIDR: 100.96.0.0/11
     clusterName: minimal.example.com
     configureCloudRoutes: false
-    enableLeaderMigration: true
-    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
   cloudProvider: aws
@@ -28,8 +27,8 @@ spec:
   containerd:
     logLevel: info
     runc:
-      version: 1.1.5
-    version: 1.6.20
+      version: 1.1.12
+    version: 1.7.16
   dnsZone: Z1AFAKE1ZON3YO
   etcdClusters:
   - backups:
@@ -86,9 +85,8 @@ spec:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.3
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -115,9 +113,8 @@ spec:
     clusterName: minimal.example.com
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.3
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -139,13 +136,12 @@ spec:
   kubeProxy:
     clusterCIDR: 100.96.0.0/11
     cpuRequest: 100m
-    image: registry.k8s.io/kube-proxy:v1.24.3
+    image: registry.k8s.io/kube-proxy:v1.30.0
     logLevel: 2
   kubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.3
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -159,7 +155,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
@@ -172,7 +167,7 @@ spec:
   kubernetesApiAccess:
   - 0.0.0.0/0
   - ::/0
-  kubernetesVersion: 1.24.3
+  kubernetesVersion: 1.30.0
   masterKubelet:
     anonymousAuth: false
     cgroupDriver: systemd
@@ -183,7 +178,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_etcd-cluster-spec-events_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_etcd-cluster-spec-events_content
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_etcd-cluster-spec-events_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_etcd-cluster-spec-events_content
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_etcd-cluster-spec-main_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_etcd-cluster-spec-main_content
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_etcd-cluster-spec-main_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_etcd-cluster-spec-main_content
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_kops-version.txt_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_kops-version.txt_content
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_kops-version.txt_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_kops-version.txt_content
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
similarity index 95%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ef6f90d8bdcb0..e67c56556a126 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
similarity index 95%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9eccfbbaaef53..13491899dde55 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
similarity index 90%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
similarity index 98%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
index 1bce38b0a9ab8..0220c655e0d10 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
@@ -36,7 +36,6 @@ spec:
         - --cluster-cidr=100.96.0.0/11
         - --cluster-name=minimal.example.com
         - --configure-cloud-routes=false
-        - --enable-leader-migration=true
         - --leader-elect=true
         - --v=2
         - --cloud-provider=aws
@@ -45,7 +44,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
         imagePullPolicy: IfNotPresent
         name: aws-cloud-controller-manager
         resources:
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content
similarity index 100%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
similarity index 89%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 67db084a77543..c434b0b06f86e 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 67e6c2aa64b617934ffd0b51f8438673fb5c6ec47f454553b7a6cab93453fcbd
+    manifestHash: 32cff2afe6ce2186407e48b50966f7280c81e42a37ccd7c2ba56cd376b9fb8a7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -26,13 +26,6 @@ spec:
     selector:
       k8s-addon: kubelet-api.rbac.addons.k8s.io
     version: 9.99.0
-  - id: k8s-1.23
-    manifest: leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml
-    manifestHash: b9c91e09c0f28c9b74ff140b8395d611834c627d698846d625c10975a74a48c4
-    name: leader-migration.rbac.addons.k8s.io
-    selector:
-      k8s-addon: leader-migration.rbac.addons.k8s.io
-    version: 9.99.0
   - manifest: limit-range.addons.k8s.io/v1.5.0.yaml
     manifestHash: 2d55c3bc5e354e84a3730a65b42f39aba630a59dc8d32b30859fcce3d3178bc2
     name: limit-range.addons.k8s.io
@@ -41,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
@@ -106,7 +99,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.18
     manifest: aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml
-    manifestHash: f53181e41fd83c5771410392c7626c3b1164b819b903eaf1455349f5315cf680
+    manifestHash: 2ba6b150075199145fc8ab742908deb28de3eeb3e321a7a40b9c263b37c09c8f
     name: aws-cloud-controller.addons.k8s.io
     selector:
       k8s-addon: aws-cloud-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
similarity index 96%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
similarity index 97%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f62c2574be36b..2f35afd7d7505 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content
similarity index 100%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content
diff --git a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_nodeupconfig-master-us-test-1a_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
similarity index 86%
rename from tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
rename to tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
index 796c2b86366b5..bb1ed4b406e6c 100644
--- a/tests/integration/update_cluster/minimal-1.24/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
@@ -27,9 +27,8 @@ APIServerConfig:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.3
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -59,21 +58,23 @@ APIServerConfig:
     -----END RSA PUBLIC KEY-----
 Assets:
   amd64:
-  - da575ceb7c44fddbe7d2514c16798f39f8c10e54b5dbef3bcee5ac547637db11@https://dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubelet
-  - 8a45348bdaf81d46caf1706c8bf95b3f431150554f47d444ffde89e8cdd712c1@https://dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
   - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
   - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
   - f90ed6dcef534e6d1ae17907dc7eb40614b8945ad4af7f0e98d2be7cde8165c6@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-amd64
   - 9992e7eb2a2e93f799e5a9e98eb718637433524bc65f630357201a79f49b13d0@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-amd64
   arm64:
-  - 6c04ae25ee9b434f40e0d2466eb4ef5604dc43f306ddf1e5f165fc9d3c521e12@https://dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubelet
-  - bdad4d3063ddb7bfa5ecf17fb8b029d5d81d7d4ea1650e4369aafa13ed97149a@https://dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.3/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
   - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
   - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
@@ -240,18 +241,16 @@ ControlPlaneConfig:
     clusterName: minimal.example.com
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.3
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
     useServiceAccountCredentials: true
   KubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.3
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -261,7 +260,7 @@ EtcdClusterNames:
 - events
 FileAssets:
 - content: |
-    apiVersion: kubescheduler.config.k8s.io/v1beta2
+    apiVersion: kubescheduler.config.k8s.io/v1
     clientConnection:
       kubeconfig: /var/lib/kube-scheduler/kubeconfig
     kind: KubeSchedulerConfiguration
@@ -281,7 +280,7 @@ KeypairIDs:
 KubeProxy:
   clusterCIDR: 100.96.0.0/11
   cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.3
+  image: registry.k8s.io/kube-proxy:v1.30.0
   logLevel: 2
 KubeletConfig:
   anonymousAuth: false
@@ -293,7 +292,6 @@ KubeletConfig:
   enableDebuggingHandlers: true
   evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
   featureGates:
-    CSIMigrationAWS: "true"
     InTreePluginAWSUnregister: "true"
   kubeconfigPath: /var/lib/kubelet/kubeconfig
   logLevel: 2
@@ -310,7 +308,7 @@ KubeletConfig:
   shutdownGracePeriodCriticalPods: 10s
   taints:
   - node-role.kubernetes.io/control-plane=:NoSchedule
-KubernetesVersion: 1.24.3
+KubernetesVersion: 1.30.0
 Networking:
   nonMasqueradeCIDR: 100.64.0.0/10
   serviceClusterIPRange: 100.64.0.0/13
@@ -323,8 +321,8 @@ configStore:
 containerdConfig:
   logLevel: info
   runc:
-    version: 1.1.5
-  version: 1.6.20
+    version: 1.1.12
+  version: 1.7.16
 etcdManifests:
 - memfs://tests/minimal.example.com/manifests/etcd/main-master-us-test-1a.yaml
 - memfs://tests/minimal.example.com/manifests/etcd/events-master-us-test-1a.yaml
diff --git a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_nodeupconfig-nodes_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_nodeupconfig-nodes_content
new file mode 100644
index 0000000000000..f9d7ba03f0cc5
--- /dev/null
+++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_nodeupconfig-nodes_content
@@ -0,0 +1,65 @@
+Assets:
+  amd64:
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
+  - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
+  - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
+  arm64:
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
+  - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
+  - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
+CAs: {}
+ClusterName: minimal.example.com
+Hooks:
+- null
+- null
+KeypairIDs:
+  kubernetes-ca: "6982820025135291416230495506"
+KubeProxy:
+  clusterCIDR: 100.96.0.0/11
+  cpuRequest: 100m
+  image: registry.k8s.io/kube-proxy:v1.30.0
+  logLevel: 2
+KubeletConfig:
+  anonymousAuth: false
+  cgroupDriver: systemd
+  cgroupRoot: /
+  cloudProvider: external
+  clusterDNS: 100.64.0.10
+  clusterDomain: cluster.local
+  enableDebuggingHandlers: true
+  evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
+  featureGates:
+    InTreePluginAWSUnregister: "true"
+  kubeconfigPath: /var/lib/kubelet/kubeconfig
+  logLevel: 2
+  nodeLabels:
+    kops.k8s.io/instancegroup: nodes-us-test-1a
+    node-role.kubernetes.io/node: ""
+  podInfraContainerImage: registry.k8s.io/pause:3.9
+  podManifestPath: /etc/kubernetes/manifests
+  protectKernelDefaults: true
+  registerSchedulable: true
+  shutdownGracePeriod: 30s
+  shutdownGracePeriodCriticalPods: 10s
+KubernetesVersion: 1.30.0
+Networking:
+  nonMasqueradeCIDR: 100.64.0.0/10
+  serviceClusterIPRange: 100.64.0.0/13
+UpdatePolicy: automatic
+containerdConfig:
+  logLevel: info
+  runc:
+    version: 1.1.12
+  version: 1.7.16
+usesLegacyGossip: false
+usesNoneDNS: false
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_sqs_queue_minimal-example-com-nth_policy b/tests/integration/update_cluster/minimal-1.30/data/aws_sqs_queue_minimal-example-com-nth_policy
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/data/aws_sqs_queue_minimal-example-com-nth_policy
rename to tests/integration/update_cluster/minimal-1.30/data/aws_sqs_queue_minimal-example-com-nth_policy
diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa24/id_rsa.pub b/tests/integration/update_cluster/minimal-1.30/id_rsa.pub
similarity index 100%
rename from tests/integration/update_cluster/many-addons-ccm-irsa24/id_rsa.pub
rename to tests/integration/update_cluster/minimal-1.30/id_rsa.pub
diff --git a/tests/integration/update_cluster/minimal-1.24/in-v1alpha2.yaml b/tests/integration/update_cluster/minimal-1.30/in-v1alpha2.yaml
similarity index 98%
rename from tests/integration/update_cluster/minimal-1.24/in-v1alpha2.yaml
rename to tests/integration/update_cluster/minimal-1.30/in-v1alpha2.yaml
index e60433b24c0eb..7b84b02fd93a6 100644
--- a/tests/integration/update_cluster/minimal-1.24/in-v1alpha2.yaml
+++ b/tests/integration/update_cluster/minimal-1.30/in-v1alpha2.yaml
@@ -34,7 +34,7 @@ spec:
   kubernetesApiAccess:
   - 0.0.0.0/0
   - ::/0
-  kubernetesVersion: v1.24.3
+  kubernetesVersion: v1.30.0
   masterPublicName: api.minimal.example.com
   networkCIDR: 172.20.0.0/16
   networking:
diff --git a/tests/integration/update_cluster/minimal-1.24/kubernetes.tf b/tests/integration/update_cluster/minimal-1.30/kubernetes.tf
similarity index 98%
rename from tests/integration/update_cluster/minimal-1.24/kubernetes.tf
rename to tests/integration/update_cluster/minimal-1.30/kubernetes.tf
index 0b17171a8f3f0..175f6b0eed8ce 100644
--- a/tests/integration/update_cluster/minimal-1.24/kubernetes.tf
+++ b/tests/integration/update_cluster/minimal-1.30/kubernetes.tf
@@ -705,14 +705,6 @@ resource "aws_s3_object" "minimal-example-com-addons-kubelet-api-rbac-addons-k8s
   server_side_encryption = "AES256"
 }
 
-resource "aws_s3_object" "minimal-example-com-addons-leader-migration-rbac-addons-k8s-io-k8s-1-23" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content")
-  key                    = "tests/minimal.example.com/addons/leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
 resource "aws_s3_object" "minimal-example-com-addons-limit-range-addons-k8s-io" {
   bucket                 = "testingBucket"
   content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content")
diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 89b30d20c6202..a34308d27f9ad 100644
--- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 3b7e77da84b55..059cfda72f9ba 100644
--- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content
index 8979f015d530a..0fe72e83535de 100644
--- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 511e99ffd45e1c0e8e8f60fdb3a392ff5abf12a2370f8b43f7dcb0ef7e587248
+    manifestHash: 885f716b0ca177923e49ec30a9ad834c39e1335c4523605105848997756ab8bd
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 463f2cf8b4c67..91a969b358435 100644
--- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ef6f90d8bdcb0..e67c56556a126 100644
--- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9eccfbbaaef53..13491899dde55 100644
--- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index f71e995ce3e7c..87a2fb5072f79 100644
--- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 67e6c2aa64b617934ffd0b51f8438673fb5c6ec47f454553b7a6cab93453fcbd
+    manifestHash: 32cff2afe6ce2186407e48b50966f7280c81e42a37ccd7c2ba56cd376b9fb8a7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f62c2574be36b..2f35afd7d7505 100644
--- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index fd53b1cf22fd9..20762cf377d8b 100644
--- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -51,7 +51,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -88,7 +88,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -107,7 +107,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 8c974fe6eb901..9635b70284ed2 100644
--- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content
index 03ea95e6fc7d2..9fa3395fb8879 100644
--- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 95c0b292a203308520f892ea236a03e43dec29926714153b50cbf95bb4fc5495
+    manifestHash: 44a6486076fbf08104585500a2ae584262e0fc3ec45ae1b900e308ef48e35bef
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index e316574bcbc3d..d82c57ca29845 100644
--- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index e33b11f1bab04..024bc52ae5efc 100644
--- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 64f45fd0d61d8..f016d1bbc3aed 100644
--- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 0fcee40e5e9ac..4fd8a7a4a3d39 100644
--- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
index 082c166f49e83..11eb09d811b45 100644
--- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: b7c44096349b7b9f5e5255d23d460b86442d63bb1595ba403a8164ea839633cc
+    manifestHash: 595ba1aa79dba96f8acd6ba9e24b921e975c5581356a82c9d62447280aba6d6d
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: bd7ab5c7c4746aed145a8d0c4afd25472b2c1943654aa212463d947491cdf7dc
+    manifestHash: 2f69795f8766a23ce454ad3b05b0a4713fa3db5e3ee2277aca2e0dc18306195a
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 3cdbaf7453578..ff22472a2af0b 100644
--- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f56da3dd1c2e5..9d0d30f8a4637 100644
--- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 64f45fd0d61d8..f016d1bbc3aed 100644
--- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 0fcee40e5e9ac..4fd8a7a4a3d39 100644
--- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
index 528905a69b36b..a1d252450f29a 100644
--- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: b7c44096349b7b9f5e5255d23d460b86442d63bb1595ba403a8164ea839633cc
+    manifestHash: 595ba1aa79dba96f8acd6ba9e24b921e975c5581356a82c9d62447280aba6d6d
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: bd7ab5c7c4746aed145a8d0c4afd25472b2c1943654aa212463d947491cdf7dc
+    manifestHash: 2f69795f8766a23ce454ad3b05b0a4713fa3db5e3ee2277aca2e0dc18306195a
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 3cdbaf7453578..ff22472a2af0b 100644
--- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f56da3dd1c2e5..9d0d30f8a4637 100644
--- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 64f45fd0d61d8..f016d1bbc3aed 100644
--- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 0fcee40e5e9ac..4fd8a7a4a3d39 100644
--- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
index b67ec61bd8939..127c7b9e82adf 100644
--- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: b7c44096349b7b9f5e5255d23d460b86442d63bb1595ba403a8164ea839633cc
+    manifestHash: 595ba1aa79dba96f8acd6ba9e24b921e975c5581356a82c9d62447280aba6d6d
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: bd7ab5c7c4746aed145a8d0c4afd25472b2c1943654aa212463d947491cdf7dc
+    manifestHash: 2f69795f8766a23ce454ad3b05b0a4713fa3db5e3ee2277aca2e0dc18306195a
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 3cdbaf7453578..ff22472a2af0b 100644
--- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f56da3dd1c2e5..9d0d30f8a4637 100644
--- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 64f45fd0d61d8..f016d1bbc3aed 100644
--- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 0fcee40e5e9ac..4fd8a7a4a3d39 100644
--- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
index b67ec61bd8939..127c7b9e82adf 100644
--- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: b7c44096349b7b9f5e5255d23d460b86442d63bb1595ba403a8164ea839633cc
+    manifestHash: 595ba1aa79dba96f8acd6ba9e24b921e975c5581356a82c9d62447280aba6d6d
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: bd7ab5c7c4746aed145a8d0c4afd25472b2c1943654aa212463d947491cdf7dc
+    manifestHash: 2f69795f8766a23ce454ad3b05b0a4713fa3db5e3ee2277aca2e0dc18306195a
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 3cdbaf7453578..ff22472a2af0b 100644
--- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f56da3dd1c2e5..9d0d30f8a4637 100644
--- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6499e9687f798..541ba2559ce24 100644
--- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index edb682a57c36c..56a6c44cc79a8 100644
--- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content
index de5b29b468a14..2d949c047fcc5 100644
--- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: f2cc7d4c1f59af24bcd63a3686d96d7610574e5bba794fdcdd0254dc46a8d84e
+    manifestHash: 3e44ae8e24aa2c5cfd8dec1866e8b3a2e3f199ccc32e2c09481991ec90b93f21
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 0d140d9a8b487..6c1c2f7a6873e 100644
--- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index aa8e4eb77837a..313c2fc68f51d 100644
--- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index daaf40245db32..642304b28195c 100644
--- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content
index ccf91ebda0e22..c039f6ae2dee6 100644
--- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 741da209170136a22dd6d924c40c014cd6357cac8d379676a9e772f76cc82f57
+    manifestHash: 314aa77b914078004efb9b57ac1268546bf64f55f556f73cec5aec797b5f9e75
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 1341bface74d0..cf98c64e3a918 100644
--- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index e6c9a4569cbcf..8938412e61792 100644
--- a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index da9b7b382c110..f51e5bc828bdc 100644
--- a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content
index 48385beadd2f7..988a254cf46f1 100644
--- a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 4297e6a42704d8587e5b07a4f337e399e8c369ab8246bf5258c04c49f38088a5
+    manifestHash: 2cf7e6f9d9d273f6864725787b136725f50c481f44150c40171f1f63776dd76e
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 16b9aed9838b4..c0de752e9f82e 100644
--- a/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gce/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index e6c9a4569cbcf..8938412e61792 100644
--- a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index da9b7b382c110..f51e5bc828bdc 100644
--- a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content
index a6d50fe7fe1ab..5c47dcd766855 100644
--- a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 4297e6a42704d8587e5b07a4f337e399e8c369ab8246bf5258c04c49f38088a5
+    manifestHash: 2cf7e6f9d9d273f6864725787b136725f50c481f44150c40171f1f63776dd76e
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
diff --git a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 16b9aed9838b4..c0de752e9f82e 100644
--- a/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gce_dns-none/data/aws_s3_object_minimal-gce.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index 853c4ad4d2226..d1fd49e24d2c3 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index 4828b93e23d13..4ee3724f71b37 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-bootstrap_content
index 156ddc39ffaef..a8c45b16c6a31 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 64dfc8821ea1163cd7961df148e607ddd05eb0cf6803f10a554c932bdc3b62c5
+    manifestHash: 1caa7ef091b891db31b634f3739178e56366222b0d0ef288fb51bc1fe1ab7081
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 6c6120c37dfb0..f4e6b74ccdcfb 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb/data/aws_s3_object_minimal-gce-ilb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index edd4728c0c966..f1df9259a1f05 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index e9ec616b889bf..f6415b43d56f4 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content
index cdfe3b9638474..f1044911a32e1 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a0300af7d0c1ae6d0850b1f946aab5e01fa943ebf2cccb8543265f733e63676
+    manifestHash: 534ce8cf4954ace41fbd704baa48623cb14f59b7d6ebc7fb4ed171841fe78b57
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index c0b88cff26364..62c210f8e4b69 100644
--- a/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gce_ilb_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index edd4728c0c966..f1df9259a1f05 100644
--- a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index e9ec616b889bf..f6415b43d56f4 100644
--- a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content
index cdfe3b9638474..f1044911a32e1 100644
--- a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a0300af7d0c1ae6d0850b1f946aab5e01fa943ebf2cccb8543265f733e63676
+    manifestHash: 534ce8cf4954ace41fbd704baa48623cb14f59b7d6ebc7fb4ed171841fe78b57
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index c0b88cff26364..62c210f8e4b69 100644
--- a/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gce_longclustername/data/aws_s3_object_minimal-gce-with-a-very-very-very-very-very-long-name.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index 39ee5d47d6ba7..89ac6b000d251 100644
--- a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index 395bc8d9a0c96..65cea65e6bb30 100644
--- a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-bootstrap_content
index bf89cf4d406fa..ab1e2db4eaa6a 100644
--- a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: a1949efb509614c2517d6cfb498ccf5f95e6ccf8558cbbf11908e5c4590e9206
+    manifestHash: dcf4c6e79f4a2ba936f99cdce7150088aee30dace28dad82b316a1fc4c4e0834
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index a07ac040a08c7..2a3876f7faf5a 100644
--- a/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gce_plb/data/aws_s3_object_minimal-gce-plb.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
index f8de302a2ed1a..0e2651641006b 100644
--- a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-events-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
index 2f10f568f75d5..4be3d3e848a31 100644
--- a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
+++ b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-etcdmanager-main-master-us-test1-a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-bootstrap_content
index 4f37c80bb30ab..556b4c6c49ec3 100644
--- a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 8f6418fb840d4582d18e0b85a521c3db588cd8b88609f2b6491f8c12b83e4eb3
+    manifestHash: 803374824e6f81f12de4c643752a1311c7b623e161191a2f0fa238fb2cb51086
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7e5b63361f78d1eca0d43e213852bb7cbdfd1f9d4827ae5cdbea12a27aaef5ad
+    manifestHash: 2bddf09b618f04c1e3f75e44232dba39f13e541fafc51586571aefde270292ba
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7cff473042a3f..310060699a245 100644
--- a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index a7329deaa67df..3e2ec08b0fd66 100644
--- a/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gce_private/data/aws_s3_object_minimal-gce-private.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 238f69edf05ed..dd1ee678451a2 100644
--- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 535ed7f42e7f7..944ccd9c363c6 100644
--- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content
index 93227d15a0633..9aacf6b2cf87f 100644
--- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 6c9506ecab5a8ab2ec0fd6f51729799f8729d69f0a9779b355d07c748dab222e
+    manifestHash: 87048bad995a68fed583eaf888e8537b8d4fc438d20021c7f78ca1b9d13262c9
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 201ae71c4e5d18686aea66a8f214811bedb7ba7845f9e5725800246389faf15a
+    manifestHash: d44c52e2196e1797e8c956e203497a19f255b1d22837824d4e64c33f728922a2
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 3aaaed1e1d596..ee3330c163cb3 100644
--- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 85153c5282d0e..e3289ca7b7840 100644
--- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 238f69edf05ed..dd1ee678451a2 100644
--- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 535ed7f42e7f7..944ccd9c363c6 100644
--- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content
index e7f1a46ba81d2..566d343fc1069 100644
--- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 6c9506ecab5a8ab2ec0fd6f51729799f8729d69f0a9779b355d07c748dab222e
+    manifestHash: 87048bad995a68fed583eaf888e8537b8d4fc438d20021c7f78ca1b9d13262c9
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 64a5d42fd0c4a764dc08a55edbb81c85613c8481e74a80bf674fabcb4fb6b445
+    manifestHash: 5b8e5209fa73280bbc2361cfb0e89e103b3b23d3c7fa0c2f2271700e83677bb0
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7b58232ef184c..4dcf59ec996de 100644
--- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -54,7 +54,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.k8s.local
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 85153c5282d0e..e3289ca7b7840 100644
--- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-events-master-fsn1_content b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-events-master-fsn1_content
index 86a1e194f7960..330e9efbaffce 100644
--- a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-events-master-fsn1_content
+++ b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-events-master-fsn1_content
@@ -50,7 +50,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -87,7 +87,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -106,7 +106,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-main-master-fsn1_content b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-main-master-fsn1_content
index 7653cdfc6696f..baadc96749607 100644
--- a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-main-master-fsn1_content
+++ b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-etcdmanager-main-master-fsn1_content
@@ -50,7 +50,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -87,7 +87,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -106,7 +106,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index d708a4a74cb2d..2c4bc50b75e67 100644
--- a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 455f9c7301da0b88df9a1ca8fbab6d4fb457601525794729827cb6e9f774777f
+    manifestHash: 9dd32b81d870c7472c68e0190fad58ac95d74f66a126db9c1de7cef62b7bf0ec
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
diff --git a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index c1beabd4e8dd0..0fd0c611e5580 100644
--- a/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_hetzner/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -65,7 +65,7 @@ spec:
           value: 127.0.0.1
         - name: HCLOUD_TOKEN
           value: REDACTED
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-events-control-plane-fr-par-1_content b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-events-control-plane-fr-par-1_content
index bcdeec25e7218..930bbed9b200c 100644
--- a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-events-control-plane-fr-par-1_content
+++ b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-events-control-plane-fr-par-1_content
@@ -52,7 +52,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -89,7 +89,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -108,7 +108,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-main-control-plane-fr-par-1_content b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-main-control-plane-fr-par-1_content
index b4fa96dbc1530..f1d189553d092 100644
--- a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-main-control-plane-fr-par-1_content
+++ b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-etcdmanager-main-control-plane-fr-par-1_content
@@ -52,7 +52,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -89,7 +89,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -108,7 +108,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-bootstrap_content b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-bootstrap_content
index 06378b6bee879..0a0ca50855967 100644
--- a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 27e65b2a8c6308266b1db12d67a18b61f053428feaf75de278c8afb010e10414
+    manifestHash: b3a1523fa01fdd522f3274c6332fce313691df8526ca003d6ff62fa8aba548d7
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 82e63943dcaa7a6b81188fdbe9208d93e160381b2f5c81268378a01a1c37b97c
+    manifestHash: 79b57e3eaf7b2d6bd690e7498e834e7c4486036e7b992af20121b57c0b98131a
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 26a6cc217617e..e625b93b139bb 100644
--- a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -54,7 +54,7 @@ spec:
         envFrom:
         - secretRef:
             name: scaleway-secret
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 72006fa591fa6..c5bf8425fc080 100644
--- a/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/minimal_scaleway/data/aws_s3_object_scw-minimal.k8s.local-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -69,7 +69,7 @@ spec:
           value: null
         - name: SCW_SECRET_KEY
           value: null
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ba30d855cf268..3faa01e70367f 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
index ba30d855cf268..3faa01e70367f 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
index ba30d855cf268..3faa01e70367f 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 7f4d3e5751e10..5809b4bd3048b 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
index 7f4d3e5751e10..5809b4bd3048b 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
index 7f4d3e5751e10..5809b4bd3048b 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content
index 9dd8f2f23392b..00141d7673f28 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7fdb93c092858722d5c71eea2462d8a306b22ddfb3af444f9c9aef8a51b43d32
+    manifestHash: 3feae3f9fbe04640c34fb16556ab2eeb11aab9431e3a072d766d0c0542c5ede0
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 3c8aaeccf3009..a1eac601ad355 100644
--- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ba30d855cf268..3faa01e70367f 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
index ba30d855cf268..3faa01e70367f 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1b_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
index ba30d855cf268..3faa01e70367f 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1c_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 7f4d3e5751e10..5809b4bd3048b 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
index 7f4d3e5751e10..5809b4bd3048b 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1b_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
index 7f4d3e5751e10..5809b4bd3048b 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1c_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content
index 9dd8f2f23392b..00141d7673f28 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7fdb93c092858722d5c71eea2462d8a306b22ddfb3af444f9c9aef8a51b43d32
+    manifestHash: 3feae3f9fbe04640c34fb16556ab2eeb11aab9431e3a072d766d0c0542c5ede0
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 3c8aaeccf3009..a1eac601ad355 100644
--- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 53d7bcfd06d8e..52126784572a8 100644
--- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index e0fc2d5d10b12..e73b09d21de8d 100644
--- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content
index 0391b8ffc4e7c..51440db4d5a8b 100644
--- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 76431d86ec23630af403278a59fdce8f589a1ab5f76c82fb36c1a32846231a5b
+    manifestHash: 63eab966019f4b9d55d63779e8121ed7b5cd6e18ac287cc9be74605e872b0722
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 1bb6b46fe9245c429c588e998a54afbd98829f44df6b2d7931c94b061af6232d
+    manifestHash: 821505e34a19f20fc51b6a65905af3b31c0671021f563d48f9a94fd4d6bd8cb1
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index ce920ed890a5f..894bc9cecb2c8 100644
--- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.nthimdsprocessor.longcluste-e6uuer
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 1e591397cc92d..76d5028b8ce07 100644
--- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 53d7bcfd06d8e..52126784572a8 100644
--- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index e0fc2d5d10b12..e73b09d21de8d 100644
--- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content
index bef249bae7c3e..1385c1e47e323 100644
--- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 76431d86ec23630af403278a59fdce8f589a1ab5f76c82fb36c1a32846231a5b
+    manifestHash: 63eab966019f4b9d55d63779e8121ed7b5cd6e18ac287cc9be74605e872b0722
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 1e591397cc92d..76d5028b8ce07 100644
--- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index e34adfdd8bd17..39ac947ed2db4 100644
--- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index e801519f9d371..1e66c5218ff08 100644
--- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index bb0607c4fc612..0cab5c7604b9a 100644
--- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content
index 0a5eb71733ba4..9444d0c73423b 100644
--- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 17a9b1fc66cdee41f578767029fd9194e00d37c760d84eb4eacd173c3545c33d
+    manifestHash: 353c3adb975b5563bc5e3ad54738413c65ad62d1dd33c7241048a23679bd8cec
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index a3018d7d80d18..f8dfa561031f1 100644
--- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index d98554cb571d9..c6165d2eb8692 100644
--- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 644561d2d0285..09c10c7572c64 100644
--- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content
index ed9b0d6244947..0851d8785a8a7 100644
--- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 25cc3686cbc9f93d31fc36c8e2ce94e38753f0752430609cdaafdde87ae80943
+    manifestHash: f8bf3572f04db052cd8454df286ac8be02274facb024514c30f6f7d77be6b48c
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 1f22c39e9b6dd..a943f4fcf61a5 100644
--- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6151dee9667a3..5c392ca649a78 100644
--- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 18f8b61f16307..3b1f8772bc34d 100644
--- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content
index 9c762bd06b728..b26d8798ba2b9 100644
--- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 02acaa62023f98e40f7e6b759ef447254d83fc7e572470339fa7fc5f32d5e847
+    manifestHash: d86efa15277687e7c040bbb64161066a1b5b68d5512b672647ac25e40b8cbc15
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 042bb64bc8e72..3b414170701d4 100644
--- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 96fbcfc4e5632..3e31f5fe923d1 100644
--- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 2b56cc27de2fa..091f10af36020 100644
--- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content
index 81980cb1d6de0..f997a80664a11 100644
--- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: d8bc4323f95c2707b176bb701d2aa89b0197d416c19301ac55659d2cd19d90f2
+    manifestHash: a0bd6f6d0d549d379be679a01909455883383b3e29825741d50031916f0b2aff
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 54d99518f7d81..0faa437f7482d 100644
--- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 5341636020c65..40d6c51b81454 100644
--- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 53b472bbedcf8..90805f44d1d49 100644
--- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
index 5a22b1e1e6783..f1bb8e83daa64 100644
--- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 233d07e2b90d0a00b03adc4fed3d24cb716140b61f251700419bcf0c41806df3
+    manifestHash: 21961605ec86efc2b03a6cb10b0151a3dbd66459394eda4b7ff45f47d5f3fb91
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index c1510f5aa04fc..45b7c533e9e09 100644
--- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 5341636020c65..40d6c51b81454 100644
--- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 53b472bbedcf8..90805f44d1d49 100644
--- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
index d3660faa74d10..10b47c8211c0a 100644
--- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 233d07e2b90d0a00b03adc4fed3d24cb716140b61f251700419bcf0c41806df3
+    manifestHash: 21961605ec86efc2b03a6cb10b0151a3dbd66459394eda4b7ff45f47d5f3fb91
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index c1510f5aa04fc..45b7c533e9e09 100644
--- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_master-us-test-1a.masters.privatecilium.example.com_user_data b/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_master-us-test-1a.masters.privatecilium.example.com_user_data
index b61a8e8d6d536..4817847dd5abf 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_master-us-test-1a.masters.privatecilium.example.com_user_data
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_master-us-test-1a.masters.privatecilium.example.com_user_data
@@ -130,7 +130,7 @@ ClusterName: privatecilium.example.com
 ConfigBase: memfs://clusters.example.com/privatecilium.example.com
 InstanceGroupName: master-us-test-1a
 InstanceGroupRole: ControlPlane
-NodeupConfigHash: tLHBOfl575BH6+GB4O3IyDZJq4WMHABHGvP+d71oMrc=
+NodeupConfigHash: HeTiwuPGGpAtrH0kzvu1L7LM0Rs+KDhWSXqRKasRCmg=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_nodes.privatecilium.example.com_user_data b/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_nodes.privatecilium.example.com_user_data
index d6f41cf789762..f3443a176a2d7 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_nodes.privatecilium.example.com_user_data
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_launch_template_nodes.privatecilium.example.com_user_data
@@ -153,7 +153,7 @@ ConfigServer:
   - https://kops-controller.internal.privatecilium.example.com:3988/
 InstanceGroupName: nodes
 InstanceGroupRole: Node
-NodeupConfigHash: RApMTx0APHMY8cSUqfvD7hUOIkW5KzhjIdNwzLj5Gyc=
+NodeupConfigHash: WRDBjzLOpoD0dOcDoujOZdN8PUdvraiFL/I4n25pji0=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content
index 8e16255d609af..7ac7b84006fef 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content
@@ -22,8 +22,7 @@ spec:
     clusterCIDR: 100.96.0.0/11
     clusterName: privatecilium.example.com
     configureCloudRoutes: false
-    enableLeaderMigration: true
-    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
   cloudProvider: aws
@@ -32,8 +31,8 @@ spec:
   containerd:
     logLevel: info
     runc:
-      version: 1.1.5
-    version: 1.6.20
+      version: 1.1.12
+    version: 1.7.16
   dnsZone: Z1AFAKE1ZON3YO
   etcdClusters:
   - backups:
@@ -83,9 +82,8 @@ spec:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -112,9 +110,8 @@ spec:
     clusterName: privatecilium.example.com
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -136,13 +133,12 @@ spec:
   kubeProxy:
     clusterCIDR: 100.96.0.0/11
     cpuRequest: 100m
-    image: registry.k8s.io/kube-proxy:v1.24.0
+    image: registry.k8s.io/kube-proxy:v1.30.0
     logLevel: 2
   kubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -156,7 +152,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
@@ -168,7 +163,7 @@ spec:
     shutdownGracePeriodCriticalPods: 10s
   kubernetesApiAccess:
   - 0.0.0.0/0
-  kubernetesVersion: 1.24.0
+  kubernetesVersion: 1.30.0
   masterKubelet:
     anonymousAuth: false
     cgroupDriver: systemd
@@ -179,7 +174,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 5341636020c65..40d6c51b81454 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 53b472bbedcf8..90805f44d1d49 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-master-us-test-1a_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
index b2e1bdb04a19e..11c01c3613f38 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
@@ -26,9 +26,8 @@ APIServerConfig:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -58,21 +57,23 @@ APIServerConfig:
     -----END RSA PUBLIC KEY-----
 Assets:
   amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
   - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
   - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
   - f90ed6dcef534e6d1ae17907dc7eb40614b8945ad4af7f0e98d2be7cde8165c6@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-amd64
   - 9992e7eb2a2e93f799e5a9e98eb718637433524bc65f630357201a79f49b13d0@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-amd64
   arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
   - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
   - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
@@ -239,18 +240,16 @@ ControlPlaneConfig:
     clusterName: privatecilium.example.com
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
     useServiceAccountCredentials: true
   KubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -260,7 +259,7 @@ EtcdClusterNames:
 - events
 FileAssets:
 - content: |
-    apiVersion: kubescheduler.config.k8s.io/v1beta2
+    apiVersion: kubescheduler.config.k8s.io/v1
     clientConnection:
       kubeconfig: /var/lib/kube-scheduler/kubeconfig
     kind: KubeSchedulerConfiguration
@@ -280,7 +279,7 @@ KeypairIDs:
 KubeProxy:
   clusterCIDR: 100.96.0.0/11
   cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
+  image: registry.k8s.io/kube-proxy:v1.30.0
   logLevel: 2
 KubeletConfig:
   anonymousAuth: false
@@ -292,7 +291,6 @@ KubeletConfig:
   enableDebuggingHandlers: true
   evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
   featureGates:
-    CSIMigrationAWS: "true"
     InTreePluginAWSUnregister: "true"
   kubeconfigPath: /var/lib/kubelet/kubeconfig
   logLevel: 2
@@ -308,7 +306,7 @@ KubeletConfig:
   shutdownGracePeriodCriticalPods: 10s
   taints:
   - node-role.kubernetes.io/control-plane=:NoSchedule
-KubernetesVersion: 1.24.0
+KubernetesVersion: 1.30.0
 Networking:
   cilium: {}
   nonMasqueradeCIDR: 100.64.0.0/10
@@ -322,8 +320,8 @@ configStore:
 containerdConfig:
   logLevel: info
   runc:
-    version: 1.1.5
-  version: 1.6.20
+    version: 1.1.12
+  version: 1.7.16
 etcdManifests:
 - memfs://clusters.example.com/privatecilium.example.com/manifests/etcd/main-master-us-test-1a.yaml
 - memfs://clusters.example.com/privatecilium.example.com/manifests/etcd/events-master-us-test-1a.yaml
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-nodes_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-nodes_content
index 918838741745b..29f2fd2feae96 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-nodes_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_nodeupconfig-nodes_content
@@ -1,18 +1,20 @@
 Assets:
   amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
   - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
   - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
   arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
   - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
   - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
 CAs: {}
@@ -25,7 +27,7 @@ KeypairIDs:
 KubeProxy:
   clusterCIDR: 100.96.0.0/11
   cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
+  image: registry.k8s.io/kube-proxy:v1.30.0
   logLevel: 2
 KubeletConfig:
   anonymousAuth: false
@@ -37,7 +39,6 @@ KubeletConfig:
   enableDebuggingHandlers: true
   evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
   featureGates:
-    CSIMigrationAWS: "true"
     InTreePluginAWSUnregister: "true"
   kubeconfigPath: /var/lib/kubelet/kubeconfig
   logLevel: 2
@@ -49,7 +50,7 @@ KubeletConfig:
   registerSchedulable: true
   shutdownGracePeriod: 30s
   shutdownGracePeriodCriticalPods: 10s
-KubernetesVersion: 1.24.0
+KubernetesVersion: 1.30.0
 Networking:
   cilium: {}
   nonMasqueradeCIDR: 100.64.0.0/10
@@ -58,7 +59,7 @@ UpdatePolicy: automatic
 containerdConfig:
   logLevel: info
   runc:
-    version: 1.1.5
-  version: 1.6.20
+    version: 1.1.12
+  version: 1.7.16
 usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
index b3031dc2a56b1..852b05dd323e7 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
@@ -36,7 +36,6 @@ spec:
         - --cluster-cidr=100.96.0.0/11
         - --cluster-name=privatecilium.example.com
         - --configure-cloud-routes=false
-        - --enable-leader-migration=true
         - --leader-elect=true
         - --v=2
         - --cloud-provider=aws
@@ -45,7 +44,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
         imagePullPolicy: IfNotPresent
         name: aws-cloud-controller-manager
         resources:
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
index 443e5bca0a764..8f5f4f1ad8ac3 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 233d07e2b90d0a00b03adc4fed3d24cb716140b61f251700419bcf0c41806df3
+    manifestHash: 21961605ec86efc2b03a6cb10b0151a3dbd66459394eda4b7ff45f47d5f3fb91
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -26,13 +26,6 @@ spec:
     selector:
       k8s-addon: kubelet-api.rbac.addons.k8s.io
     version: 9.99.0
-  - id: k8s-1.23
-    manifest: leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml
-    manifestHash: b9c91e09c0f28c9b74ff140b8395d611834c627d698846d625c10975a74a48c4
-    name: leader-migration.rbac.addons.k8s.io
-    selector:
-      k8s-addon: leader-migration.rbac.addons.k8s.io
-    version: 9.99.0
   - manifest: limit-range.addons.k8s.io/v1.5.0.yaml
     manifestHash: 2d55c3bc5e354e84a3730a65b42f39aba630a59dc8d32b30859fcce3d3178bc2
     name: limit-range.addons.k8s.io
@@ -41,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
@@ -171,7 +164,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.18
     manifest: aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml
-    manifestHash: 527199629cbc1c2a8aec21d8b74cef0731221e9296e3ded0f63cb50b48124ada
+    manifestHash: e15c2d2b914a41e34aee7d0fb3fda9425508b06e449f097fa72906d7867185ed
     name: aws-cloud-controller.addons.k8s.io
     selector:
       k8s-addon: aws-cloud-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index c1510f5aa04fc..45b7c533e9e09 100644
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
deleted file mode 100644
index 11ed6d46fd241..0000000000000
--- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
+++ /dev/null
@@ -1,52 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cloud-provider-extraction-migration
-  resources:
-  - leases
-  verbs:
-  - create
-  - list
-  - get
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: system::leader-locking-migration
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:kube-controller-manager
-- kind: ServiceAccount
-  name: kube-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: cloud-controller-manager
-  namespace: kube-system
diff --git a/tests/integration/update_cluster/privatecilium2/in-v1alpha2.yaml b/tests/integration/update_cluster/privatecilium2/in-v1alpha2.yaml
index 925101fdf2fd2..a14d1539531cc 100644
--- a/tests/integration/update_cluster/privatecilium2/in-v1alpha2.yaml
+++ b/tests/integration/update_cluster/privatecilium2/in-v1alpha2.yaml
@@ -23,7 +23,7 @@ spec:
   iam: {}
   kubelet:
     anonymousAuth: false
-  kubernetesVersion: v1.24.0
+  kubernetesVersion: v1.30.0
   masterPublicName: api.privatecilium.example.com
   networkCIDR: 172.20.0.0/16
   networking:
diff --git a/tests/integration/update_cluster/privatecilium2/kubernetes.tf b/tests/integration/update_cluster/privatecilium2/kubernetes.tf
index cfaa629824d91..2d4ce3c6e2256 100644
--- a/tests/integration/update_cluster/privatecilium2/kubernetes.tf
+++ b/tests/integration/update_cluster/privatecilium2/kubernetes.tf
@@ -564,7 +564,7 @@ resource "aws_launch_template" "bastion-privatecilium-example-com" {
     http_endpoint               = "enabled"
     http_protocol_ipv6          = "disabled"
     http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
+    http_tokens                 = "required"
   }
   monitoring {
     enabled = false
@@ -637,7 +637,7 @@ resource "aws_launch_template" "master-us-test-1a-masters-privatecilium-example-
     http_endpoint               = "enabled"
     http_protocol_ipv6          = "disabled"
     http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
+    http_tokens                 = "required"
   }
   monitoring {
     enabled = false
@@ -719,7 +719,7 @@ resource "aws_launch_template" "nodes-privatecilium-example-com" {
     http_endpoint               = "enabled"
     http_protocol_ipv6          = "disabled"
     http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
+    http_tokens                 = "required"
   }
   monitoring {
     enabled = false
@@ -1029,14 +1029,6 @@ resource "aws_s3_object" "privatecilium-example-com-addons-kubelet-api-rbac-addo
   server_side_encryption = "AES256"
 }
 
-resource "aws_s3_object" "privatecilium-example-com-addons-leader-migration-rbac-addons-k8s-io-k8s-1-23" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_privatecilium.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content")
-  key                    = "clusters.example.com/privatecilium.example.com/addons/leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
 resource "aws_s3_object" "privatecilium-example-com-addons-limit-range-addons-k8s-io" {
   bucket                 = "testingBucket"
   content                = file("${path.module}/data/aws_s3_object_privatecilium.example.com-addons-limit-range.addons.k8s.io_content")
diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-cilium-master-us-test-1a_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-cilium-master-us-test-1a_content
index f492994439b0a..512b829bb9326 100644
--- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-cilium-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-cilium-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index fa1b542febfa2..e6210a9df40b5 100644
--- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 84651f2ae3fe4..c59c622040716 100644
--- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content
index 98b8c74416204..fd40ba69ae0de 100644
--- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 824539d5f11350f9233a2caff258d78415066269f0331d1508c4d863b591e246
+    manifestHash: abf7bf3918f3b4b3a932f73a3d5a3eac6568fc8fc9b21741f5be71c2cd797890
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 60c9b6dcaec9e..08f66d05d6cdf 100644
--- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 93871510ed6c1..0730df11c8f57 100644
--- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 2f02316c4259a..de65e7cca3d8f 100644
--- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content
index db391e365bfab..46e7c74fee3b7 100644
--- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7b51564118ea95375432697c917a5de89e3816c4e4146b7f923cefe48e5636b3
+    manifestHash: 1ba2e30eee4b5029502681ff78e8961bc68922a7d258fbc4c7489185ac85bc5c
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 4ee6a92fe3d5b8efca1c2a914a2d2bf69c7ac7e4afd141a2f3d10471db7b9457
+    manifestHash: 6f2d0906725ba96d9afea3ca1ada564a96bfa010defed99df5c26b34f6d2faa2
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 7fb5b648bac5b..4b7861b52908b 100644
--- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index a502694747b4c..28edbfa0ad26b 100644
--- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index ffbe4352fc33e..477b3b2a06345 100644
--- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 33756dbac27a5..0781d1764c485 100644
--- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content
index ee4dabcb3f4b9..e593897cfd02d 100644
--- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 73a7f51aff02fa5feccd8c440fadd985bc23203cc2824839a64066e5bd9cf0a3
+    manifestHash: af1db56964f3230c23f426beb71105a3e98e2f51b4cb4eeef7f20d0f8d056058
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 988c52656a3b38a4dc03c3029b531bba7f937bffae311df8547481ca9e24e6d2
+    manifestHash: de790e5da83ea62f53599e4a7ed5ede9322c40c5cb973a0fb5ebf688b9c9fc63
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 2f362cab73aff..549467f052e5a 100644
--- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index fd5f020e2a036..8c56cb842d85d 100644
--- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index dd48c3d65f18b..3b2e0c1de9e9d 100644
--- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index dff79392a32ae..3a666fdc5c6ee 100644
--- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content
index 4fa1e307b838b..82ae7006afee2 100644
--- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 206c6115e371ac65a9feb785ec8f518a4482efcec172c2864e02a2160c00dc5d
+    manifestHash: 4883ab5a783c5ca5b31adf6f91ddb5319df09598a4dd9612be29ebde1fffa144
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 51dac51ab5cbe..dfc75461b2728 100644
--- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 1df9665859fa5..599876088b97d 100644
--- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 44dbfafc3d59a..37beaa5baa10a 100644
--- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content
index c724b214e366b..770505f557d88 100644
--- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: f240c6391b5c08de79fd8620823eebcb074d6daca47afc968d7b5d649f9ba551
+    manifestHash: 36fca9c27c74e19bc77847c5784e74bd89588adf3c15ae78d948f8f6543dce91
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index e405f3f24e87a..57fa63bf7d42d 100644
--- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
index 847db184c01b0..cd879823fe44c 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data
@@ -130,7 +130,7 @@ ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: master-us-test-1a
 InstanceGroupRole: ControlPlane
-NodeupConfigHash: gw4FqI/iYezJoUssyQkWJWi08sMiqbK8i2byEheSuSI=
+NodeupConfigHash: Duu1UgVA1bBc6p0gd+s4xThTZPHDhyRYKaVc9It2fZs=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_nodes.minimal.example.com_user_data b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_nodes.minimal.example.com_user_data
index aaf655993ab00..41b895bc9b331 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_nodes.minimal.example.com_user_data
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_launch_template_nodes.minimal.example.com_user_data
@@ -153,7 +153,7 @@ ConfigServer:
   - https://kops-controller.internal.minimal.example.com:3988/
 InstanceGroupName: nodes
 InstanceGroupRole: Node
-NodeupConfigHash: Ic5j487QYtFMGa5cNrv0FPEIIY8Vuv2mtkHIHh8hALg=
+NodeupConfigHash: f3SIt6lwu28rdMqKOyae3WReKSKO/aBN/NrM8hJJqyU=
 
 __EOF_KUBE_ENV
 
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content
index b42bce5e0c6b2..13a81ad043344 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content
@@ -18,8 +18,7 @@ spec:
     clusterCIDR: 100.96.0.0/11
     clusterName: minimal.example.com
     configureCloudRoutes: false
-    enableLeaderMigration: true
-    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+    image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
   cloudProvider: aws
@@ -28,8 +27,8 @@ spec:
   containerd:
     logLevel: info
     runc:
-      version: 1.1.5
-    version: 1.6.20
+      version: 1.1.12
+    version: 1.7.16
   dnsZone: Z1AFAKE1ZON3YO
   etcdClusters:
   - backups:
@@ -80,10 +79,9 @@ spec:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
       ServiceAccountIssuerDiscovery: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -110,9 +108,8 @@ spec:
     clusterName: minimal.example.com
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -134,13 +131,12 @@ spec:
   kubeProxy:
     clusterCIDR: 100.96.0.0/11
     cpuRequest: 100m
-    image: registry.k8s.io/kube-proxy:v1.24.0
+    image: registry.k8s.io/kube-proxy:v1.30.0
     logLevel: 2
   kubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -154,7 +150,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
@@ -166,7 +161,7 @@ spec:
     shutdownGracePeriodCriticalPods: 10s
   kubernetesApiAccess:
   - 0.0.0.0/0
-  kubernetesVersion: 1.24.0
+  kubernetesVersion: 1.30.0
   masterKubelet:
     anonymousAuth: false
     cgroupDriver: systemd
@@ -177,7 +172,6 @@ spec:
     enableDebuggingHandlers: true
     evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
     kubeconfigPath: /var/lib/kubelet/kubeconfig
     logLevel: 2
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
index de25ce1adf447..8adc375b3d457 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content
@@ -36,7 +36,6 @@ spec:
         - --cluster-cidr=100.96.0.0/11
         - --cluster-name=minimal.example.com
         - --configure-cloud-routes=false
-        - --enable-leader-migration=true
         - --leader-elect=true
         - --v=2
         - --cloud-provider=aws
@@ -49,7 +48,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/aws-cloud-controller-manager.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.24.19
+        image: registry.k8s.io/provider-aws/cloud-controller-manager:v1.30.0
         imagePullPolicy: IfNotPresent
         name: aws-cloud-controller-manager
         resources:
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index 2a610612c6712..d10da53322a5f 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -26,13 +26,6 @@ spec:
     selector:
       k8s-addon: kubelet-api.rbac.addons.k8s.io
     version: 9.99.0
-  - id: k8s-1.23
-    manifest: leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml
-    manifestHash: b9c91e09c0f28c9b74ff140b8395d611834c627d698846d625c10975a74a48c4
-    name: leader-migration.rbac.addons.k8s.io
-    selector:
-      k8s-addon: leader-migration.rbac.addons.k8s.io
-    version: 9.99.0
   - manifest: limit-range.addons.k8s.io/v1.5.0.yaml
     manifestHash: 2d55c3bc5e354e84a3730a65b42f39aba630a59dc8d32b30859fcce3d3178bc2
     name: limit-range.addons.k8s.io
@@ -41,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
+    manifestHash: 3950a960f29504cc3130b24f5a50281c88365ead305750886dedfaaf4cbd63cd
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
@@ -106,7 +99,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.18
     manifest: aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml
-    manifestHash: 3710ee51fe69835a29713646d2cbfca3312f54f2edf3ec03379d49401432b220
+    manifestHash: 8b61e16920c77962fe0d5f6041f753f0690b8f29798436970e504073bc0acd38
     name: aws-cloud-controller.addons.k8s.io
     selector:
       k8s-addon: aws-cloud-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 0322368ae45b7..e0f311486d676 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
deleted file mode 100644
index 11ed6d46fd241..0000000000000
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content
+++ /dev/null
@@ -1,52 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-rules:
-- apiGroups:
-  - coordination.k8s.io
-  resourceNames:
-  - cloud-provider-extraction-migration
-  resources:
-  - leases
-  verbs:
-  - create
-  - list
-  - get
-  - update
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  creationTimestamp: null
-  labels:
-    addon.kops.k8s.io/name: leader-migration.rbac.addons.k8s.io
-    app.kubernetes.io/managed-by: kops
-    k8s-addon: leader-migration.rbac.addons.k8s.io
-  name: system::leader-locking-migration
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: system::leader-locking-migration
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: system:kube-controller-manager
-- kind: ServiceAccount
-  name: kube-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: aws-cloud-controller-manager
-  namespace: kube-system
-- kind: ServiceAccount
-  name: cloud-controller-manager
-  namespace: kube-system
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-master-us-test-1a_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
index 6fe4d583ea3d9..367363ee252f3 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-master-us-test-1a_content
@@ -27,10 +27,9 @@ APIServerConfig:
     etcdServersOverrides:
     - /events#https://127.0.0.1:4002
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
       ServiceAccountIssuerDiscovery: "true"
-    image: registry.k8s.io/kube-apiserver:v1.24.0
+    image: registry.k8s.io/kube-apiserver:v1.30.0
     kubeletPreferredAddressTypes:
     - InternalIP
     - Hostname
@@ -60,21 +59,23 @@ APIServerConfig:
     -----END RSA PUBLIC KEY-----
 Assets:
   amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
   - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
   - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
   - f90ed6dcef534e6d1ae17907dc7eb40614b8945ad4af7f0e98d2be7cde8165c6@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-amd64
   - 9992e7eb2a2e93f799e5a9e98eb718637433524bc65f630357201a79f49b13d0@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/amd64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-amd64
   arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
   - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
   - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
@@ -241,18 +242,16 @@ ControlPlaneConfig:
     clusterName: minimal.example.com
     configureCloudRoutes: false
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-controller-manager:v1.24.0
+    image: registry.k8s.io/kube-controller-manager:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
     useServiceAccountCredentials: true
   KubeScheduler:
     featureGates:
-      CSIMigrationAWS: "true"
       InTreePluginAWSUnregister: "true"
-    image: registry.k8s.io/kube-scheduler:v1.24.0
+    image: registry.k8s.io/kube-scheduler:v1.30.0
     leaderElection:
       leaderElect: true
     logLevel: 2
@@ -262,7 +261,7 @@ EtcdClusterNames:
 - events
 FileAssets:
 - content: |
-    apiVersion: kubescheduler.config.k8s.io/v1beta2
+    apiVersion: kubescheduler.config.k8s.io/v1
     clientConnection:
       kubeconfig: /var/lib/kube-scheduler/kubeconfig
     kind: KubeSchedulerConfiguration
@@ -282,7 +281,7 @@ KeypairIDs:
 KubeProxy:
   clusterCIDR: 100.96.0.0/11
   cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
+  image: registry.k8s.io/kube-proxy:v1.30.0
   logLevel: 2
 KubeletConfig:
   anonymousAuth: false
@@ -294,7 +293,6 @@ KubeletConfig:
   enableDebuggingHandlers: true
   evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
   featureGates:
-    CSIMigrationAWS: "true"
     InTreePluginAWSUnregister: "true"
   kubeconfigPath: /var/lib/kubelet/kubeconfig
   logLevel: 2
@@ -310,7 +308,7 @@ KubeletConfig:
   shutdownGracePeriodCriticalPods: 10s
   taints:
   - node-role.kubernetes.io/control-plane=:NoSchedule
-KubernetesVersion: 1.24.0
+KubernetesVersion: 1.30.0
 Networking:
   nonMasqueradeCIDR: 100.64.0.0/10
   serviceClusterIPRange: 100.64.0.0/13
@@ -323,8 +321,8 @@ configStore:
 containerdConfig:
   logLevel: info
   runc:
-    version: 1.1.5
-  version: 1.6.20
+    version: 1.1.12
+  version: 1.7.16
 etcdManifests:
 - memfs://clusters.example.com/minimal.example.com/manifests/etcd/main-master-us-test-1a.yaml
 - memfs://clusters.example.com/minimal.example.com/manifests/etcd/events-master-us-test-1a.yaml
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-nodes_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-nodes_content
index 1be98c3438142..566a8814e5f95 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-nodes_content
+++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_nodeupconfig-nodes_content
@@ -1,18 +1,20 @@
 Assets:
   amd64:
-  - 3d98ac8b4fb8dc99f9952226f2565951cc366c442656a889facc5b1b2ec2ba52@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubelet
-  - 94d686bb6772f6fb59e3a32beff908ab406b79acdfb2427abdc4ac3ce1bb98d7@https://dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/amd64/kubectl
-  - 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz
-  - bb9a9ccd6517e2a54da748a9f60dc9aa9d79d19d4724663f2386812f083968e2@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-amd64.tar.gz
-  - f00b144e86f8c1db347a2e8f22caade07d55382c5f76dd5c0a5b1ab64eaec8bb@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.amd64
+  - 32a32ec3d7e7f8b2648c9dd503ce9ef63b4af1d1677f5b5aed7846fb02d66f18@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubelet
+  - 7c3807c0f5c1b30110a2ff1e55da1d112a6d0096201f1beb81b269f582b5d1c5@https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl
+  - 5035d7814c95cd3cedbc5efb447ef25a4942ef05caab2159746d55ce1698c74a@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/amd64/ecr-credential-provider-linux-amd64
+  - f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  - 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  - aadeef400b8f05645768c1476d1023f7875b78f52c7ff1967a6dbce236b8cbd8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
   - 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-amd64.tar.gz
   - d16a1ffb3938f5a19d5c8f45d363bd091ef89c0bc4d44ad16b933eede32fdcbb@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-amd64.tar.gz
   arm64:
-  - 8f066c9a048dd1704bf22ccf6e994e2fa2ea1175c9768a786f6cb6608765025e@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubelet
-  - 449278789de283648e4076ade46816da249714f96e71567e035e9d17e1fff06d@https://dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.24.0/bin/linux/arm64/kubectl
-  - ef17764ffd6cdcb16d76401bac1db6acc050c9b088f1be5efa0e094ea3b01df0@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz
-  - c3e6a054b18b20fce06c7c3ed53f0989bb4b255c849bede446ebca955f07a9ce@https://github.com/containerd/containerd/releases/download/v1.6.20/containerd-1.6.20-linux-arm64.tar.gz
-  - 54e79e4d48b9e191767e4abc08be1a8476a1c757e9a9f8c45c6ded001226867f@https://github.com/opencontainers/runc/releases/download/v1.1.5/runc.arm64
+  - fa887647422d34f3c7cc5b30fefcf97084d2c3277eff237c5808685ba8e4b15a@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubelet
+  - 669af0cf520757298ea60a8b6eb6b719ba443a9c7d35f36d3fb2fd7513e8c7d2@https://dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl,https://cdn.dl.k8s.io/release/v1.30.0/bin/linux/arm64/kubectl
+  - b3d567bda9e2996fc1fbd9d13506bd16763d3865b5c7b0b3c4b48c6088c04481@https://artifacts.k8s.io/binaries/cloud-provider-aws/v1.27.1/linux/arm64/ecr-credential-provider-linux-arm64
+  - 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57@https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  - 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75@https://github.com/containerd/containerd/releases/download/v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  - 879f910a05c95c10c64ad8eb7d5e3aa8e4b30e65587b3d68e009a3565aed5bb8@https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.arm64
   - d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d@https://github.com/containerd/nerdctl/releases/download/v1.7.4/nerdctl-1.7.4-linux-arm64.tar.gz
   - 0b615cfa00c331fb9c4524f3d4058a61cc487b33a3436d1269e7832cf283f925@https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.29.0/crictl-v1.29.0-linux-arm64.tar.gz
 CAs: {}
@@ -25,7 +27,7 @@ KeypairIDs:
 KubeProxy:
   clusterCIDR: 100.96.0.0/11
   cpuRequest: 100m
-  image: registry.k8s.io/kube-proxy:v1.24.0
+  image: registry.k8s.io/kube-proxy:v1.30.0
   logLevel: 2
 KubeletConfig:
   anonymousAuth: false
@@ -37,7 +39,6 @@ KubeletConfig:
   enableDebuggingHandlers: true
   evictionHard: memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%,imagefs.available<10%,imagefs.inodesFree<5%
   featureGates:
-    CSIMigrationAWS: "true"
     InTreePluginAWSUnregister: "true"
   kubeconfigPath: /var/lib/kubelet/kubeconfig
   logLevel: 2
@@ -49,7 +50,7 @@ KubeletConfig:
   registerSchedulable: true
   shutdownGracePeriod: 30s
   shutdownGracePeriodCriticalPods: 10s
-KubernetesVersion: 1.24.0
+KubernetesVersion: 1.30.0
 Networking:
   nonMasqueradeCIDR: 100.64.0.0/10
   serviceClusterIPRange: 100.64.0.0/13
@@ -57,7 +58,7 @@ UpdatePolicy: automatic
 containerdConfig:
   logLevel: info
   runc:
-    version: 1.1.5
-  version: 1.6.20
+    version: 1.1.12
+  version: 1.7.16
 usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/in-v1alpha2.yaml b/tests/integration/update_cluster/public-jwks-apiserver/in-v1alpha2.yaml
index 8d556b7d59418..24c4f5ef4e1d4 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/in-v1alpha2.yaml
+++ b/tests/integration/update_cluster/public-jwks-apiserver/in-v1alpha2.yaml
@@ -25,7 +25,7 @@ spec:
       ServiceAccountIssuerDiscovery: "true"
   kubelet:
     anonymousAuth: false
-  kubernetesVersion: v1.24.0
+  kubernetesVersion: v1.30.0
   masterPublicName: api.minimal.example.com
   networkCIDR: 172.20.0.0/16
   networking:
diff --git a/tests/integration/update_cluster/public-jwks-apiserver/kubernetes.tf b/tests/integration/update_cluster/public-jwks-apiserver/kubernetes.tf
index bf948eaa5a6e6..4a127e5aa14c0 100644
--- a/tests/integration/update_cluster/public-jwks-apiserver/kubernetes.tf
+++ b/tests/integration/update_cluster/public-jwks-apiserver/kubernetes.tf
@@ -553,7 +553,7 @@ resource "aws_launch_template" "master-us-test-1a-masters-minimal-example-com" {
     http_endpoint               = "enabled"
     http_protocol_ipv6          = "disabled"
     http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
+    http_tokens                 = "required"
   }
   monitoring {
     enabled = false
@@ -635,7 +635,7 @@ resource "aws_launch_template" "nodes-minimal-example-com" {
     http_endpoint               = "enabled"
     http_protocol_ipv6          = "disabled"
     http_put_response_hop_limit = 1
-    http_tokens                 = "optional"
+    http_tokens                 = "required"
   }
   monitoring {
     enabled = false
@@ -838,14 +838,6 @@ resource "aws_s3_object" "minimal-example-com-addons-kubelet-api-rbac-addons-k8s
   server_side_encryption = "AES256"
 }
 
-resource "aws_s3_object" "minimal-example-com-addons-leader-migration-rbac-addons-k8s-io-k8s-1-23" {
-  bucket                 = "testingBucket"
-  content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-leader-migration.rbac.addons.k8s.io-k8s-1.23_content")
-  key                    = "clusters.example.com/minimal.example.com/addons/leader-migration.rbac.addons.k8s.io/k8s-1.23.yaml"
-  provider               = aws.files
-  server_side_encryption = "AES256"
-}
-
 resource "aws_s3_object" "minimal-example-com-addons-limit-range-addons-k8s-io" {
   bucket                 = "testingBucket"
   content                = file("${path.module}/data/aws_s3_object_minimal.example.com-addons-limit-range.addons.k8s.io_content")
diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index cc4a48bfa1abe..29d9eb7cb2cf0 100644
--- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 9ccd83991ffaa..6e04a577a4773 100644
--- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content
index 6aef1fd4fb4f5..f7e22cee615a6 100644
--- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 38e40cc93df65860f6ab0089a7c367d84c8da459e3adaf34536709a5b63fdc52
+    manifestHash: 16bf8466bc0a649f275da496a9d97e7f1de70489da1b3279ca041f974dd05cab
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 507bf82684287..6dba426e505a8 100644
--- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 1de8e17069c21..c98f74a5f1fc2 100644
--- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 57e4d1f4b96f5..cb60820b84ddf 100644
--- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content
index 9585d37d5d3db..5019d93908962 100644
--- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 18594efbc271f0ef1a112d8204d537cf9862724609e20723beaab11da3884c42
+    manifestHash: 8b0968398efc6f94f9cf1a43064f4fafbdc73d284141c13c869172c665819678
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 30421be898bcf..271a4901d9a21 100644
--- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 64f45fd0d61d8..f016d1bbc3aed 100644
--- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 0fcee40e5e9ac..4fd8a7a4a3d39 100644
--- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -49,7 +49,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -86,7 +86,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -105,7 +105,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
index b67ec61bd8939..127c7b9e82adf 100644
--- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: b7c44096349b7b9f5e5255d23d460b86442d63bb1595ba403a8164ea839633cc
+    manifestHash: 595ba1aa79dba96f8acd6ba9e24b921e975c5581356a82c9d62447280aba6d6d
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: bd7ab5c7c4746aed145a8d0c4afd25472b2c1943654aa212463d947491cdf7dc
+    manifestHash: 2f69795f8766a23ce454ad3b05b0a4713fa3db5e3ee2277aca2e0dc18306195a
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index 3cdbaf7453578..ff22472a2af0b 100644
--- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index f56da3dd1c2e5..9d0d30f8a4637 100644
--- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 5f3c8db744c93..5b50c95119b08 100644
--- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index 0260a798b7e00..1dac6daa58284 100644
--- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content
index c389830053fe4..30ce42d7d9a1e 100644
--- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7fcb4d7300b21228db38457af499ef4d6c7ffc827479ca19f91e57633777a2c2
+    manifestHash: 087266fcb422196663d517bbe26ac9ee6a8757178c45379334e8f67042bb2993
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 802097498d1d2..684c79bc4138c 100644
--- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
index 6d716ed9ac47f..4ce71773dd3b0 100644
--- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
+++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
index ce52df218a5a8..1b70a1b33f1ee 100644
--- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
+++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content
@@ -48,7 +48,7 @@ spec:
     - --src=/ko-app/kops-utils-cp
     command:
     - /ko-app/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: kops-utils-cp
     resources: {}
     volumeMounts:
@@ -85,7 +85,7 @@ spec:
     - --src=/opt/etcd-v3.4.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-4-13
     resources: {}
     volumeMounts:
@@ -104,7 +104,7 @@ spec:
     - --src=/opt/etcd-v3.5.13/etcdctl
     command:
     - /opt/kops-utils/kops-utils-cp
-    image: registry.k8s.io/kops/kops-utils-cp:1.29.0-beta.1
+    image: registry.k8s.io/kops/kops-utils-cp:1.30.0-alpha.1
     name: init-etcd-symlinks-3-5-13
     resources: {}
     volumeMounts:
diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
index ad4af21f68751..efab15c1d1377 100644
--- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
+++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content
@@ -8,7 +8,7 @@ spec:
     - --ca-cert=/secrets/ca.crt
     - --client-cert=/secrets/client.crt
     - --client-key=/secrets/client.key
-    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.29.0-beta.1
+    image: registry.k8s.io/kops/kube-apiserver-healthcheck:1.30.0-alpha.1
     livenessProbe:
       httpGet:
         host: 127.0.0.1
diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index e33b11f1bab04..024bc52ae5efc 100644
--- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: ecfdc9870532ca07bd01967b3ea1de3fb0e4e48eba6d9a9be5a54eefb10b861e
+    manifestHash: 3d74b3ec38cca8de333d028823c09a0ea0e69c863ab4834c10a15c287db9235f
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
index fd3a51fca5dd0..560f724ff9259 100644
--- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
+++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -48,7 +48,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
index 4974f4fc55d10..e9402112e42cf 100644
--- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
+++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/upup/pkg/fi/cloudup/apply_cluster.go b/upup/pkg/fi/cloudup/apply_cluster.go
index 757c943040268..29d875ed26251 100644
--- a/upup/pkg/fi/cloudup/apply_cluster.go
+++ b/upup/pkg/fi/cloudup/apply_cluster.go
@@ -70,9 +70,9 @@ const (
 	starline = "*********************************************************************************"
 
 	// OldestSupportedKubernetesVersion is the oldest kubernetes version that is supported in kOps.
-	OldestSupportedKubernetesVersion = "1.24.0"
+	OldestSupportedKubernetesVersion = "1.25.0"
 	// OldestRecommendedKubernetesVersion is the oldest kubernetes version that is not deprecated in kOps.
-	OldestRecommendedKubernetesVersion = "1.26.0"
+	OldestRecommendedKubernetesVersion = "1.27.0"
 )
 
 // TerraformCloudProviders is the list of cloud providers with terraform target support
diff --git a/upup/pkg/fi/cloudup/template_functions.go b/upup/pkg/fi/cloudup/template_functions.go
index a3d56118c90e9..d779c896c678d 100644
--- a/upup/pkg/fi/cloudup/template_functions.go
+++ b/upup/pkg/fi/cloudup/template_functions.go
@@ -888,9 +888,7 @@ func (tf *TemplateFunctions) OpenStackCCMTag() string {
 	if err != nil {
 		tag = "latest"
 	} else {
-		if parsed.Minor == 24 {
-			tag = "v1.24.6"
-		} else if parsed.Minor == 25 {
+		if parsed.Minor == 25 {
 			tag = "v1.25.5"
 		} else if parsed.Minor == 26 {
 			tag = "v1.26.2"
@@ -912,9 +910,7 @@ func (tf *TemplateFunctions) OpenStackCSITag() string {
 	if err != nil {
 		tag = "latest"
 	} else {
-		if parsed.Minor == 24 {
-			tag = "v1.24.6"
-		} else if parsed.Minor == 25 {
+		if parsed.Minor == 25 {
 			tag = "v1.25.5"
 		} else if parsed.Minor == 26 {
 			tag = "v1.26.2"
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml
index ef87dc4b4b821..01dd1816411f2 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml
index ef87dc4b4b821..01dd1816411f2 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml
index d9ec20f8c5784..be19cd2951457 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml
index f2b394f993fdc..ce552b072d856 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml
index d7e449100cc50..aee70114099e4 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/kops-controller.addons.k8s.io-k8s-1.16.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/kops-controller.addons.k8s.io-k8s-1.16.yaml
index a9abab364bd9c..c59a85397d88b 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/kops-controller.addons.k8s.io-k8s-1.16.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/kops-controller.addons.k8s.io-k8s-1.16.yaml
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml
index 88d8b81cac133..2d62337ea67f1 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml
index 7a55aeeee1176..cf695958de8cc 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml
index d1b2c25b5fdfb..1cf9662093f59 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml
index e447e187cf031..194c79fb8244c 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -41,7 +41,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/dns-controller.addons.k8s.io-k8s-1.12.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/dns-controller.addons.k8s.io-k8s-1.12.yaml
index 0322368ae45b7..e0f311486d676 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/dns-controller.addons.k8s.io-k8s-1.12.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/dns-controller.addons.k8s.io-k8s-1.12.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: dns-controller.addons.k8s.io
     k8s-app: dns-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: dns-controller
   namespace: kube-system
 spec:
@@ -24,7 +24,7 @@ spec:
         k8s-addon: dns-controller.addons.k8s.io
         k8s-app: dns-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -51,7 +51,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/dns-controller.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: registry.k8s.io/kops/dns-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/dns-controller:1.30.0-alpha.1
         name: dns-controller
         resources:
           requests:
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/kops-controller.addons.k8s.io-k8s-1.16.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/kops-controller.addons.k8s.io-k8s-1.16.yaml
index a9abab364bd9c..c59a85397d88b 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/kops-controller.addons.k8s.io-k8s-1.16.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/kops-controller.addons.k8s.io-k8s-1.16.yaml
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml
index 5b24b9e936e9e..d0c7db9c8805e 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: 7b2b6fe8a33f0514e8a780cf27270dc06a5750f46541a990d4293a56a3cf867f
+    manifestHash: 3950a960f29504cc3130b24f5a50281c88365ead305750886dedfaaf4cbd63cd
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/kops-controller.addons.k8s.io-k8s-1.16.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/kops-controller.addons.k8s.io-k8s-1.16.yaml
index a9abab364bd9c..c59a85397d88b 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/kops-controller.addons.k8s.io-k8s-1.16.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/kops-controller.addons.k8s.io-k8s-1.16.yaml
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: kops-controller.addons.k8s.io
     k8s-app: kops-controller
-    version: v1.29.0-beta.1
+    version: v1.30.0-alpha.1
   name: kops-controller
   namespace: kube-system
 spec:
@@ -39,7 +39,7 @@ spec:
         k8s-addon: kops-controller.addons.k8s.io
         k8s-app: kops-controller
         kops.k8s.io/managed-by: kops
-        version: v1.29.0-beta.1
+        version: v1.30.0-alpha.1
     spec:
       affinity:
         nodeAffinity:
@@ -63,7 +63,7 @@ spec:
         env:
         - name: KUBERNETES_SERVICE_HOST
           value: 127.0.0.1
-        image: registry.k8s.io/kops/kops-controller:1.29.0-beta.1
+        image: registry.k8s.io/kops/kops-controller:1.30.0-alpha.1
         name: kops-controller
         resources:
           requests:
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml
index e1fd9a0052bf5..73c5b5baf614a 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml
@@ -6,7 +6,7 @@ spec:
   addons:
   - id: k8s-1.16
     manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 7a4b7dc8f9c111cf0de961ac745d8ff28072c99c42242d13b7f7cf99f2a814b9
+    manifestHash: cee6d2cf15e2c9be243071eecb92a5fa802c7b999168734fbf0984333a51f417
     name: kops-controller.addons.k8s.io
     needsRollingUpdate: control-plane
     selector:
@@ -34,7 +34,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.12
     manifest: dns-controller.addons.k8s.io/k8s-1.12.yaml
-    manifestHash: f9fc525f2ab1c6e828e814ce3373cab4155517f86c279c6fc051502015749fc9
+    manifestHash: a551bffb1354e1a6952ece8ee8ab746c2e2de3eefbec8ed7b78f5dbe01f34c7b
     name: dns-controller.addons.k8s.io
     selector:
       k8s-addon: dns-controller.addons.k8s.io