update: bazel run //third_party/k8s/spegel:write_rendered_manifests bazel fetch @spegel