update:
    bazel run //third_party/k8s/spegel:write_rendered_manifests
    bazel fetch @spegel