https://kubernetes.io/blog/2019/01/14/apiserver-dry-run-and-kubectl-diff/