From 8fc352ec4f99807cae5bd8ba8d1c6cab4a1de216 Mon Sep 17 00:00:00 2001
From: Artem Chernyshev <artem.0xD2@gmail.com>
Date: Fri, 10 Jul 2020 16:08:50 +0300
Subject: [PATCH] feat: merge mode in talosctl kubeconfig

New flag `-m` will enable merge mechanism in `talosctl kubeconfig`

Command examples:

```
talosctl kubeconfig -m

talosctl kubeconfig -m ~/.kube/config
```

Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>
---
 cmd/talosctl/cmd/talos/kubeconfig.go          |  70 +++++++++++++++++-
 cmd/talosctl/pkg/talos/helpers/archive.go     |  39 ++++++++++
 .../pkg/talos/helpers/helpers_test.go         |  38 ++++++++--
 .../pkg/talos/helpers/testdata/archive.tar.gz | Bin 0 -> 6738 bytes
 docs/talosctl/talosctl_kubeconfig.md          |   2 +
 go.mod                                        |  10 ++-
 go.sum                                        |  52 ++++++++++++-
 internal/integration/cli/kubeconfig.go        |  27 ++++++-
 8 files changed, 221 insertions(+), 17 deletions(-)
 create mode 100644 cmd/talosctl/pkg/talos/helpers/testdata/archive.tar.gz

diff --git a/cmd/talosctl/cmd/talos/kubeconfig.go b/cmd/talosctl/cmd/talos/kubeconfig.go
index 456c76dab..d861d4708 100644
--- a/cmd/talosctl/cmd/talos/kubeconfig.go
+++ b/cmd/talosctl/cmd/talos/kubeconfig.go
@@ -7,24 +7,33 @@ package talos
 import (
 	"context"
 	"fmt"
+	"io"
 	"os"
+	"os/user"
 	"path/filepath"
 	"sync"
 
+	"github.com/particledecay/kconf/pkg/kubeconfig"
+	"k8s.io/client-go/tools/clientcmd"
+
 	"github.com/spf13/cobra"
 
 	"github.com/talos-systems/talos/cmd/talosctl/pkg/talos/helpers"
 	"github.com/talos-systems/talos/pkg/client"
 )
 
-var force bool
+var (
+	force bool
+	merge bool
+)
 
 // kubeconfigCmd represents the kubeconfig command.
 var kubeconfigCmd = &cobra.Command{
 	Use:   "kubeconfig [local-path]",
 	Short: "Download the admin kubeconfig from the node",
 	Long: `Download the admin kubeconfig from the node.
-Kubeconfig will be written to PWD/kubeconfig or [local-path]/kubeconfig if specified.`,
+Kubeconfig will be written to PWD/kubeconfig or [local-path]/kubeconfig if specified.
+If merge flag is defined, config will be merged with ~/.kube/config or [local-path] if specified.`,
 	Args: cobra.MaximumNArgs(1),
 	RunE: func(cmd *cobra.Command, args []string) error {
 		return WithClient(func(ctx context.Context, c *client.Client) error {
@@ -49,11 +58,14 @@ Kubeconfig will be written to PWD/kubeconfig or [local-path]/kubeconfig if speci
 
 			defer wg.Wait()
 
+			if merge {
+				return extractAndMerge(args, r)
+			}
+
 			localPath, err := os.Getwd()
 			if err != nil {
 				return fmt.Errorf("error getting current working directory: %s", err)
 			}
-
 			if len(args) == 1 {
 				localPath = args[0]
 			}
@@ -72,7 +84,59 @@ Kubeconfig will be written to PWD/kubeconfig or [local-path]/kubeconfig if speci
 	},
 }
 
+func extractAndMerge(args []string, r io.ReadCloser) error {
+	data, err := helpers.ExtractFileFromTarGz("kubeconfig", r)
+	if err != nil {
+		return err
+	}
+
+	var localPath string
+
+	if len(args) == 1 {
+		localPath = filepath.Clean(args[0])
+	} else {
+		var usr *user.User
+		usr, err = user.Current()
+
+		if err != nil {
+			return err
+		}
+
+		localPath = filepath.Join(usr.HomeDir, ".kube/config")
+	}
+
+	config, err := clientcmd.Load(data)
+	if err != nil {
+		return err
+	}
+
+	// base file does not exist, dump config as is
+	if _, err = os.Stat(localPath); os.IsNotExist(err) {
+		err = os.MkdirAll(filepath.Dir(localPath), 0755)
+		if err != nil {
+			return err
+		}
+
+		return clientcmd.WriteToFile(*config, localPath)
+	}
+
+	baseConfig, err := clientcmd.LoadFromFile(localPath)
+	if err != nil {
+		return err
+	}
+
+	kconf := kubeconfig.KConf{Config: *baseConfig}
+	err = kconf.Merge(config, Cmdcontext)
+
+	if err != nil {
+		return err
+	}
+
+	return clientcmd.WriteToFile(kconf.Config, localPath)
+}
+
 func init() {
 	kubeconfigCmd.Flags().BoolVarP(&force, "force", "f", false, "Force overwrite of kubeconfig if already present")
+	kubeconfigCmd.Flags().BoolVarP(&merge, "merge", "m", false, "Merge with existing kubeconfig")
 	addCommand(kubeconfigCmd)
 }
diff --git a/cmd/talosctl/pkg/talos/helpers/archive.go b/cmd/talosctl/pkg/talos/helpers/archive.go
index 1c51ceca2..b49a6437f 100644
--- a/cmd/talosctl/pkg/talos/helpers/archive.go
+++ b/cmd/talosctl/pkg/talos/helpers/archive.go
@@ -9,12 +9,51 @@ import (
 	"compress/gzip"
 	"fmt"
 	"io"
+	"io/ioutil"
 	"os"
 	"path/filepath"
 
 	"github.com/talos-systems/talos/pkg/safepath"
 )
 
+// ExtractFileFromTarGz reads a single file data from an archive.
+func ExtractFileFromTarGz(filename string, r io.ReadCloser) ([]byte, error) {
+	defer r.Close() //nolint:errcheck
+
+	zr, err := gzip.NewReader(r)
+	if err != nil {
+		return nil, fmt.Errorf("error initializing gzip: %w", err)
+	}
+
+	tr := tar.NewReader(zr)
+
+	for {
+		hdr, err := tr.Next()
+		if err != nil {
+			if err == io.EOF {
+				break
+			}
+
+			return nil, err
+		}
+
+		hdrPath := safepath.CleanPath(hdr.Name)
+		if hdrPath == "" {
+			return nil, fmt.Errorf("empty tar header path")
+		}
+
+		if hdrPath == filename {
+			if hdr.Typeflag == tar.TypeDir || hdr.Typeflag == tar.TypeSymlink {
+				return nil, fmt.Errorf("%s is not a file", filename)
+			}
+
+			return ioutil.ReadAll(tr)
+		}
+	}
+
+	return nil, fmt.Errorf("couldn't find file %s in the archive", filename)
+}
+
 // ExtractTarGz extracts .tar.gz archive from r into filesystem under localPath.
 //
 //nolint: gocyclo
diff --git a/cmd/talosctl/pkg/talos/helpers/helpers_test.go b/cmd/talosctl/pkg/talos/helpers/helpers_test.go
index 5ea27158f..3e027fda7 100644
--- a/cmd/talosctl/pkg/talos/helpers/helpers_test.go
+++ b/cmd/talosctl/pkg/talos/helpers/helpers_test.go
@@ -4,11 +4,37 @@
 
 package helpers_test
 
-import "testing"
+import (
+	"os"
+	"testing"
 
-func TestEmpty(t *testing.T) {
-	// added for accurate coverage estimation
-	//
-	// please remove it once any unit-test is added
-	// for this package
+	yaml "gopkg.in/yaml.v2"
+
+	"github.com/stretchr/testify/assert"
+
+	"github.com/talos-systems/talos/cmd/talosctl/pkg/talos/helpers"
+)
+
+type cfg struct {
+	APIVersion string `yaml:"apiVersion"`
+	Kind       string `yaml:"kind"`
+}
+
+func TestExtractFileFromTarGz(t *testing.T) {
+	file, err := os.Open("./testdata/archive.tar.gz")
+	assert.NoError(t, err)
+
+	data, err := helpers.ExtractFileFromTarGz("kubeconfig", file)
+	assert.NoError(t, err)
+
+	// just some primitive sanity check that yaml file inside was not corrupted somehow
+	var c cfg
+	err = yaml.Unmarshal(data, &c)
+	assert.NoError(t, err)
+
+	assert.Equal(t, c.APIVersion, "v1")
+	assert.Equal(t, c.Kind, "Config")
+
+	_, err = helpers.ExtractFileFromTarGz("void", file)
+	assert.Error(t, err)
 }
diff --git a/cmd/talosctl/pkg/talos/helpers/testdata/archive.tar.gz b/cmd/talosctl/pkg/talos/helpers/testdata/archive.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..6883b382eb951975d650966df2bddd91d9c77a93
GIT binary patch
literal 6738
zcmV-Y8m;9YiwFP!00000|J0h@lB+tF=j-}B#eRY6mcV3hpNNT=#2_#jk@^PR0iqLI
z0<&$>#ytH*o;uxAJv|jM6BB(gy218ZMwTp=e*d*(zuLaLPXBuT{L6n?0|0<G0RFgw
z|8(`d9o+o|`u_spzkuDF=l=yj=mYqdAK<_4C;iX%bzhp>U%>x!U;pdi{y%BWe3t#~
ze!fn>|9HUP?0GW3|2X`yAb#uI*L~@4_uqf}>yN1!``>>ojl16e`mg6(-`$$d_P5`D
z{P@%B_uqc}`0?Z3-yZ$#_aDQu%=h2_`JW;9r{JH!Kf&MMc02zMkFLKh=YKtS&C>t1
z`C5kS?YzAHYMQ0_{l|%c<;38D3X}137*UxCCUiys67&xnSPm9uOo*VdI3gACG(bKR
zS*U@dbi_3uT`VWJ86`DSdqiCQ>>~HoSX7eH+&VSf8qo!23lBubPij$2WSw)FVFM&p
zf+``=iB{&>jkIFpdTF`5>)5E?!UIM_EMw<$K`#dE1?3X=<MPJG^`T-acx5n6u+OI%
zVKV=_%>XT^q?lNl5{@Jl_{zmH6j0B~4Y`qXEynfIe~(MK%m7N2m`^R7vnJISZV{y-
zI|zZ|!)PWZ!;r?`zUDzZGkwni7lCga1~>^4y_s271j<P-xj%<8zP^e?hjgU88}GMH
z4mI-zzfGm=V^cHrGw1gDYT)}ytvO&sR_d+iPQjg$^^3wG6YhP(Nj9kQ`r@kF;Vlc>
z*g`ql9ZtIkb5xN@7X`vcu^HPdT@x~+Lan@;22WhFg>LSl#>Jz`J-E6*WrTUB235qz
z2L-{P<@>FX`oW^XqX543)%+pAexq&<nOZMc{oK`Zo)7lut4b$KI4<nZm$23^lNc~G
zXT5cTsO76f=qkN6P$Kwfk>13`ti(y(jKMFQh5@lb&ZPUuHyrkAo%ts6j)z)$xRDYG
z9cKeYc&B0*snmt^B6F^?9ZjX5dqG41O1n)?9Y>%{&{|3<YcX%a4H;MHi6`pnOSq$C
z-qe&$T|`fvk^zUIkQS^2;19!Hr4l5&L=QZ1tE|H5<n43nNz^Lpv1m9Ja`@=P!subS
zii=zubPam8$b${Me##0u4j-h#2b#bLI~tQo=e^Kx^+XpV_NOA1Vb8Iv$Kj5l8JHhp
zEG1|VUZl6%c!J87<B2%A8BX$A;Tz#b%4)uu#C&xM)ocr&>Ow=~!jFQ>sYpX6(rjp4
z>~XQa^^pT5%BI#ku5{dEX@j!o`o_G@V;dUf=j`X+^U*0?h#1cdn2l|j>^!GCSw9M%
zQJtC(GP+1BSd^&&%%6YJQPw&&tMD=Bqg0JpJ~Rv?WeKDyE)JJ$%D2xan-I_-`x2uO
zVnio8F3(adCuRpJ69kQncP1@@66s&13}cM2G^n_d3cs4MfUSU!B9U56E;J*^TW<*P
zblep-Q%bEV+t9gqEhA0#xj?hafjnb0DB-O$x0LA=sU|gvRPrp7A@3%=Firv)g^BiK
zpD2UL=NuAYehD=nh=3uEO;|{2X=)HT?|mU;Xn>2Fn1(veChqi6K#Ax$hf-vd_OpWq
zG9eCKXpE>5?qr}l9Bf9V7{0&j)6{5+G%FAdh4_3Bi=+X_r{ehN|8WcqIl!R?GNf)`
zg~Q_s#CfsNH=H2VU*3H)nPV#l%HuujCz=w6y?R2Nb6xf>^9i?4;<Be2QBj=twy@;E
zV%#)V>M{)>cIL)LoXh82;Pd@q#_WYJ_R&QHm7M-MdBs+^@S@R>7hs0n=zh^LyO@nO
zY}Bg}@s0S$&3M^cAIn_>kgXNEQ?P_|vX8^KjD`C2I5!8Oz>BA`C#24MwuqkNl8uIl
zB%nBPXX7Cx#CkD~F2bjPUG$^1F2I~NRIDp|-Mto>=CqN#w%JX~S*X;#^--1!1>f{E
zXYGhJha@Of21~I{^)%-i3>BC2T#Q4`oXi_BJDm*82~tKA?E3M3%RPPUp4Uw~Gvwa&
z!Bw#7O-E+Z_x9pSnd)QV!WF~pSvYymz5PR1alq_+*S-sSG(<*ZZ-vuq<GX=*^@B&~
z+CnoO#;b2)sXBis3K<S1*RRHfyUvBOLE#yD#$vnXS`DxlcVArUjlm-z${evoAMJPy
zIQ-sQ-9saaR1}t&A9JzclNM$yruS#(50j2z)(f|qEesfRu-#Cty&zL*rV20MWwQ5*
z5d<d~J_^s2g5yGn*ehd=OJqc;>h<)T2MpGuN$!Ag^H5bbG>N%mVIOjYq!FJUt<bKs
z&M(=0tv7k0ez$UYe9#F^t#peL@JMX-kYL%2H7}NC<H21YM4_A}){_&e3t%J`Xlapn
z(di0Hw%p5jQH?U!VxxhYkS@gjO2P2f#PhSZ^Ff3CCY-KnuJ2;P632DUxH)zyj>vS~
z*fh`e_j4=}GQRb7<t{o3XK5u@Q+QJfJ&A9;UJf+@-4iExF<v&3iav=i9`#0dZ8TiE
z&+Drnq1GI&azvYo9BQo$I*0(4!&!_nl+o}aVn3USJ|qYEpNxdKC7%RHCS#W{fkPRK
zKltcGuK(?~uls+%w#JO->9-$0zCZpOr*-b!Ps?Bb9>)G}5lqMO8$T*t{T+faB9^d=
zgGVig319F|Rqrn)YEL44=r4m$5z@>q4`toejJPBcA#O8DsxGIFA{qbD_jg!C#2Ya4
z;!TdOQSl6w8(5p*H=<<nz4W-CVF6&=_zufh04`}#3+)%__xpI`g5G*E|IH@oy%sPw
z{*d$*DKeT;+AM4#ja$2e^@drSWTH!{R`Krnjby!roL1&&po^tLlzxYuWVldoeLJ|h
zW|yo{u>&>7s*!WmC#xkJ`c+$VZ<FjxRA$n^&0NG!3NY`4;Y=MjiVz|eQ7KS}V;9lX
zgys)~yXQphzvr3~ACa;OLkWkBUXCx}vRT_TB_2MVz)Ey_+z5c4u=qjL{8c1!m%r{W
z2Ix2HuJR%)>Es|IRGQ~}YDIQy{n|ILrEJ}&r#<`1fqSUKQZxXkG>vzqih)S*FD&rJ
zM;GyAAvm1}8Sj;xWJu%dgZcO+tLvkPv-@ERkF~RY5ic7Z&7cLPSPid6z;g#>Sss?V
zspwTG?3MBCPGC^X-ZwIWTc5yZBkPy+^|{{Yv*UQB<6>KT&jrY8>|b}^Xwswi2j85;
zBRb_CC0%j{O6^`{6t4MeUvM?3Qgoh-U86^BJ0PB23{e-OM{!<`8jxEpEojJ`;0iBg
ziq;}AQ45VP?e4{@uq4%7^YQMpDD%h`Mr6~TiF935b66xbY*VVFUA_t+iw2soL6S9s
z4o!T09?th&y$#QThef>&pp7!#a2K%Hd}(BU6%)2)gvKH@vEDT35x#XIC`;iEHK_e=
z3$FsKu}bt8_MM~gIyYA2#4d<};-*F!v8wYMg`Y;v2PU$lRL^ge^?D2G3C52ip^*Et
z=n!R1GP@QHS%(m-xj9NFq1eoaQu;~XXKBWTNg;<)x}@XAD<<@-1A!;h(wIu$n(^-A
z(O~H#R!r_m)9}%b@X!b&B}9tJ`ATC=3lAS?I+Wx>F9%1@x#u8`!dq7jix799Ds*T!
zb88&hWQrjNbEZ>6d-ZuE;Bzbd0kL?#GdpO^!xsVfjqvc;MDBP3*8q!WUdDlIxvuF&
zJ`I;g<3U^|`xi?BO~%=){i8=lS$3B!p)sC~>R>m?dm(gFTx3Noec=i}IDhv@MQ7tA
zFP>K)D|j;wuj=x?732IQ6W)4ZtPukC3VxMQ{SZO}Y~2Ho#4ln5h|?G1?IWr_fe<bx
z5`|>kztPGRy+t1f`zNmP;XqWqqkqUTe84gC8A5+UvSd9F=X`3BW@7Qxx15vmNGgLU
zz)=TGD5OltWH13REaEOF5U&*CtiIq_2zj6gNg`tK9rA@hQl0mkP|K~ct}#)Djko?{
z3H~V5jBA1O7F?eS$+EGoHpx7&O=lgs`a&K3)(@e8=1i;(T7^ozW!J(B@}3`89t~^n
zvRb>a;n6VRSkKhr#6$x#Y6;r&f>qM(XfnTWil2=@+reI8BjQ^V=?A^I1gB2Z(G7fD
zk$@-`VhI{ouU#@PL@c)O>Ofq?s**tK4FQJmTNml1tHLyg?>iyrPN&ygCBcPN^lISo
z)q!C%0vF9RG}NEBx~e^#W_i1zgZ9zVZrIjBjtc3p@r}}ua&r+oBjYER*A>g+#-eQP
zKIf=)IMI`M$c+MKGsLEDrQ>?8!Aj|7L}B+&1I>-aFkqs1w8%Lrf@{g$ky!g;NPA+`
zfr+JTN39F6*u%K5_=GP_l>r$WOKcWPL6_DG{6e~lr6z3SPv1m3Z!f6i>CgzaZ>Th!
zJM(DlnirK;bj;??clX)`SL2hs13zC<p|OxCz^Zr&Yk=5>td9-V(8(e;UsU~kP`k={
zvaq*L*!dYWmG!$6vEsFV6AArjxmNYKo{hzC?EUJ~6n*e2vr_H0_JYPHtzj(&+d3UI
zz-_|Kyph^d>b_|(-1~9Bjm34Bx-VV5duB9KpDbHH>1R7?So^a$jLXG9bS7LcouZAZ
zjIS*8YlW9W?0lshWn#!r5L<JhX{$t_-0{)G0oE$Gvv>w#L}e|rxgBRggm%LJ%vFSL
z4Wa|~@mDj#t?*GyAg%~EUhQbeqD<+S7W#bm#JIv7>LZ;7+Inc$C&7~^w4%OA+tD43
z&=*tDkUg)ftUez+{<&*yFckuYZG63nWKgFK`CW<&orZ}V*Fwhiqmx5!_;JV3P?w4p
zoy1Qm*1U}8H=4RriEv&>Tpva_ef*!|+TRhG?f*eCj0q5b3Y2Biev?>uqSF3(hZ!^B
zat2XGEDG75LatNSM=ep(rtY9qdXv(9_0=%77JGel-D>Xq#y+2-LLuWKU@0EWL}$GT
zV8C)ej8e5or_JU>4e(RL`NR+Rok-@UV9SG5)N90&oIDGO8YVnxB7GSbz}`fa#Y&kO
z3v%N;yY=I$>d}O~s`I|ePK5xEQlO@m$5&y02E@+}N|-Obg&#`Aps}4#EgeM~o;&9x
zi=Phy2d|G17e4jXq_=NyZxed&F2{{O=Tlt~uR-%sP41>)eJc<9q>JoM9`<j>>5o=9
zuXV&zcAv6~^SE6+Gr2b=^(ZEJ>xHR{4WEe(PBP9;LM-KB(pMbEk5<7CrUqBr*<(He
zOrVucIFSjR8KjhR^rq~7S5}#CVl<iR=xg;1YTuOXur#&PO8D<V9~Y30UCyLNN_DRm
zVk=U86!BtpTx=p<8=Wi<GvaHXzHf5;8FY3Sx%&*bhynMri>$&^<LD>=s>vvPZk=qZ
zZY`cym~X?E_AO}rAr#(l(7s+&VrDLWg4QnQ);FBUY*Zt8YToU7D@lRg1D0gJy6xSQ
zJk*Ngr<~kL3R#)zb3Hg+G`@Um#iu7YDzK1>SmQ~M4Tg6?r+)f0IX;;+=k6jiEPmcv
zK$A`_w(}9iBg(Ndx=Gfg0h&|jXpcnBFE|u@5JJf#<;O?sXOP?Z)WP{ie3>%O41AMW
z5w8e?^;aYDu?7;io}QY>1|`Z4y_~tYWFI<S{HCHl|C|pv(d^{AQOn{%(eN~C-D!o+
zMjm%;oCyQV4)ZKjyxZ7onN%_lr5dR5_OBM~2keJdIAe{}li>BOwo81l!G{K`?k)(K
z!~LeFuqaZr=y(^jo2Ip0agzk+Cf;AV^!>s8`boyjHDdW_M-dRQQt5`U6X?p6MC6Zz
zOq>&mP6VKd3N+UM9&0EgGcJqa^w?gEE}~GDDGo*agiY!)93#*pTIuuN2^7w9ly7~E
zmVC>0?1JC=ak(opGh$ICNBxV(=tHLTq?7AbjCa2jyBD@W+@f$O&dW(UT=nT7&8QXe
z;G-X5BH=*ggoD;wCdo723U?Qmqkp)>PwsUf2m4WryT?IxBOb1m&A9a7*4riG4rkhh
zjvao!Fd9BE&k(LCHlsWeIE*@WH@%siO5NNDOq<uwT)<CXI21^Q6hADZx_oZ+ByHz#
zO5D+ta1c$rd&p!@3IHn={|vNGmy<``$wNwd@YQhq;?p2Fpqrj_s^4eCredo-xfDX*
zh*(7jk3QRmBU5YGr`fL#q7#m^(BS7T->_m8edU|j^|9P=yarOiLoKsoTg@wm!`LWV
z94_W+B3<dK*ov4s5s_WJQBr^|IC=V6q%LHhxk-z!wOU@-qRC8V*G>3MTgnyNKU=T+
zrZr@EHZ_O))=uxa{Em53@gl;pUh0^P?p#cAqW&;5t4XW$QB_5tRlG_xytJGPYO`m<
zQFemp%v~0q0LFdf0&cURcUQlC&SMiDZyc;;T^XQdDEqYDbv8RtYdxWG*#URr!r=m8
z(I_{uN#{ynC&xX`eSD!}f6<BEaiu@nc$jj3xE&lCJ2B)c3LnBZcO}fdzKETg+}gxo
zZGn9lKYW&n`Gpa_a5o5}GA2DF3m58=yPAOF)=YZrIPs`hUPg*s#PF;mELf7=3prP<
z!etAVFKX!rv9J^=P8;vOe(%m*HAf=Je9k|E8bDVbmdT_B=?favVJVebWDe#~Jg*+z
zvbn2hSaPx&HD86mjpX0@_|wP9?j_v&Q$rW=!`{l6>ehEd0rrx5=uuZVF<TgE&wML(
zjGcH0n`H+_?>NOoD?RoK2PPSU5}}~B$3GJDnC%bEMrA3pq)6qpQ})q|Vps5xhzre?
zK$A$8os8j2So<tCgnRj(%frtnkLR(yXe{~g%mMm!@_ueyn!BvBJGs=i9_gm=f?u7Z
zm)Z|EmIN;~;zJAdLgPCi(0m955r<(=rc^fXbA;jhv$caSp?TJxd!3+zjeUA8C!R?M
z+>P{0!w^x=X*mufjXF<=dFh;ml)Ez?Wh5q4P%BST1aG;Ahr=YjzM>VW&~n<oiF0uc
z!kLMKn8ipiaSaH}A`yw58uyAt*;kp+4-MT~LljV}2kgs?`gEo-as|W=#~|mE4ym9w
zW{0)rG-p-);`05;Qp%OkVY5-MsgM%M0DAWGCAQdaoq3f4a|{ucE)LYi$nslh1I%h6
zK}Y7WhDX2I2FV0e+V1Dx!hic;OCE`>yT~t|>~4*(m*TwKuouw6E=!}9V=<Wny%@hh
zShFe{%xk%D{^=b?6A6E~2^U_KD7+4=yJCFaPLLkuL=Qzm{T$%AQ~OekFqg_c8;G%<
zvR@bt6L#*1fsAX8w_<X?gg{YoIp)O2i--m*cy?7{Z6wO_F8+i#MF$4yCdPfNfvZp8
zbH(EG#UuJgEj{QB<*la=2ANV<+0;*A#>ehv*iYCzXRO&Bb``xei9EDhxRq76GYJiA
zE~iq7pn)jqlHlBp$h8*n!tXpiQlgUGt5+zfU&~S}m=j^($<tK&?~j9v*LrjxrJ}!1
ze(htaS2@lxg>#|C&zHU+*2iYnX_)pgiWHKVR`$iK;@QA%ZR7pYLI-pVUwV=ck>aI|
zj(Lxql+p04FVw2Edvf0tP3oq?%9LBJm0b=LtPQ*9tVPC(OP2Mies%y)-~6lPC%`dU
zaWy}fpo`{o>&OgPI+R^B+;KYOofxu?<GHr$&~f}|m5d4-znG^ZozAxPhP!y}3w9At
zQAx&lMoSSW8XIZ6VPhkL)ZzHxWYry(n!4jtAbDl!?3Izc2(dr&@msa-sfZ*q-*Gd|
zuAMTKi1$%Hxr_nulCXQVh~8zqDwenkgLUD&%XuPRVw{QI+(gDKYeX=M*!(i*C2PPe
zbMVa<!Jw+ohvqV2ZYVJP9tZyFM~zxXUIt-+dG;V`Un!wg_q=YU(w6whtH+?C8@|@l
z0Muxtgjv|zVd{`PwejbRb5ysHc0!ntc!S?xB;erlQM>MS@`kYCLr}8)xrj1(u=8A0
z*}1maWFo2C_~<Ed1QZ}%Z+dBcbCJ&8=;Q|CJJ+}{(i3{?60&xngY{;<7^(rThNj(y
z4|>UJ4M<KL3OP6ax2_RFhP`#a1Td8ZKOZK>S>uMFMaDmY-9vb^l*qlY6o-5aeCFw#
zU-XA?=B_Hdlh92y(3Sq2(^?##5@in#%$+8|N!sF3fO#Px5S^GWy2@^aXYzuFqlygX
zGW_b~J79kl+tv+B{nn;rl@obzphYoKe6Y(Ad)AY1p2`@iZiH`oLt3Z$(T?ty0rLml
zu)<>4(aUf)W49}uBW$C#o6I1UVHCwre%=SdLj(1ZYoX0eQUnB&fW_;krJjjhL_Ntj
zb>64BU)+kc3m6#Q6w*&KWp7yErh_gQv3?a*RvABRaz7-*!zZ#i%<U}s=ZtHJ9vBF~
z;PJ)M;iXmlYT^ZJ;pS4>K#yS8f;q0){-nf`^zOJ*hy;Z<ys_%)(Ghz!=z=z0A0={_
zK}rsj(XBTO*b4>;aoA4BZ!Yrr<}#JKd;9wN&?$O}QEwRi!M~I!)b#OkQfYYQ%7kQc
zL$T?MY_;EQI3Od*nJ3?b$X-3d5!te#^`x&4%Zs~#wIWMP<wygTuO<p#ydt~aULUOL
z){{4%d4#VW3hPeI15M0P+WDf`GWTQ-)x|**YtTXWg%K)fiZ<pb$i4MIdGYELo%+Ml
zhy(_m4ATbSlz?l{h^)X!JUPGsPx8<w%Y{J$Ihy^0qmLHsADw3^vbmE?u21IUUwyK-
zoRh6^)Rn?GCD5VZ;z46~#g{DUCY*Cy1PtOYEN5w~SW7WDF$R9Uz2{ishd}X@C^+;8
zm!0?Y2$VPMn~Z{=t5K^puO%qOLXDtMc*rxz`8k;1YKS2jYhR~f-A(3Is{O60x}YF4
z$83MZE-RVJNEad1iF(J<qi+&)tVKY0inEf}YvXC6V*D(4NDCLQIaprx6kcR(-mue+
zRw%<F{tsCX;c$3FA!Aa9G8Uf<Nc}fE$baju)6%cYAGNAKU;kTy>Tjot{<lYt{;XvE
odtK}As$Bp5Kl^uIx7#1Zu0QYp4;}wU00030|4ox>NDL<c0ANp2SO5S3

literal 0
HcmV?d00001

diff --git a/docs/talosctl/talosctl_kubeconfig.md b/docs/talosctl/talosctl_kubeconfig.md
index a677de81f..9d8c39bf8 100644
--- a/docs/talosctl/talosctl_kubeconfig.md
+++ b/docs/talosctl/talosctl_kubeconfig.md
@@ -7,6 +7,7 @@ Download the admin kubeconfig from the node
 
 Download the admin kubeconfig from the node.
 Kubeconfig will be written to PWD/kubeconfig or [local-path]/kubeconfig if specified.
+If merge flag is defined, config will be merged with ~/.kube/config or [local-path] if specified.
 
 ```
 talosctl kubeconfig [local-path] [flags]
@@ -17,6 +18,7 @@ talosctl kubeconfig [local-path] [flags]
 ```
   -f, --force   Force overwrite of kubeconfig if already present
   -h, --help    help for kubeconfig
+  -m, --merge   Merge with existing kubeconfig
 ```
 
 ### Options inherited from parent commands
diff --git a/go.mod b/go.mod
index 3d96811cb..1a07c6420 100644
--- a/go.mod
+++ b/go.mod
@@ -51,12 +51,13 @@ require (
 	github.com/opencontainers/image-spec v1.0.1 // indirect
 	github.com/opencontainers/runc v1.0.0-rc90 // indirect
 	github.com/opencontainers/runtime-spec v1.0.3-0.20200520003142-237cc4f519e2
+	github.com/particledecay/kconf v1.8.0
 	github.com/pin/tftp v2.1.0+incompatible
 	github.com/prometheus/procfs v0.0.8
 	github.com/rs/xid v1.2.1
 	github.com/ryanuber/columnize v2.1.0+incompatible
 	github.com/smira/go-xz v0.0.0-20150414201226-0c531f070014
-	github.com/spf13/cobra v0.0.5
+	github.com/spf13/cobra v1.0.0
 	github.com/stretchr/testify v1.5.1
 	github.com/syndtr/gocapability v0.0.0-20180916011248-d98352740cb2
 	github.com/talos-systems/bootkube-plugin v0.0.0-20200610162424-78d7183391b6
@@ -67,12 +68,13 @@ require (
 	github.com/vishvananda/netns v0.0.0-20200520041808-52d707b772fe // indirect
 	github.com/vmware/vmw-guestinfo v0.0.0-20170707015358-25eff159a728
 	go.etcd.io/etcd v3.3.13+incompatible
-	golang.org/x/crypto v0.0.0-20200220183623-bac4c82f6975
-	golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553
-	golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e
+	golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9
+	golang.org/x/net v0.0.0-20200625001655-4c5254603344
+	golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208
 	golang.org/x/sys v0.0.0-20200625212154-ddb9806d33ae
 	golang.org/x/text v0.3.2
 	golang.org/x/time v0.0.0-20191024005414-555d28b269f0
+	golang.org/x/tools v0.0.0-20200710042808-f1c4188a97a1 // indirect
 	google.golang.org/grpc v1.27.0
 	google.golang.org/protobuf v1.25.0
 	gopkg.in/freddierice/go-losetup.v1 v1.0.0-20170407175016-fc9adea44124
diff --git a/go.sum b/go.sum
index 1b0e884ed..6a85f5a56 100644
--- a/go.sum
+++ b/go.sum
@@ -44,6 +44,7 @@ github.com/Microsoft/hcsshim v0.8.7 h1:ptnOoufxGSzauVTsdE+wMYnCWA301PdoN4xg5oRdZ
 github.com/Microsoft/hcsshim v0.8.7/go.mod h1:OHd7sQqRFrYd3RmSgbgji+ctCwkbq2wbEYNSzOYtcBQ=
 github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46/go.mod h1:3wb06e3pkSAbeQ52E9H9iFoQsEEwGN64994WTCIhntQ=
 github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c=
+github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
 github.com/PuerkitoBio/purell v1.0.0/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/purell v1.1.0/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/purell v1.1.1 h1:WEQqlqaGbrPkxLJWfBwQmfEAE1Z7ONdDLqrN38tNFfI=
@@ -78,6 +79,7 @@ github.com/blang/semver v3.5.0+incompatible h1:CGxCgetQ64DKk7rdZ++Vfnb1+ogGNnB17
 github.com/blang/semver v3.5.0+incompatible/go.mod h1:kRBLl5iJ+tD4TcOOxsy/0fnwebNt5EWlYSAyrTnjyyk=
 github.com/buger/jsonparser v0.0.0-20180808090653-f4dd9f5a6b44/go.mod h1:bbYlZJ7hK1yFx9hf58LP0zeX7UjIGs20ufpu3evjr+s=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
+github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc=
 github.com/cheggaaa/pb v1.0.27/go.mod h1:pQciLPpbU0oxA0h+VJYYLxO+XeDQb5pZijXscXHm81s=
 github.com/cilium/ebpf v0.0.0-20191113100448-d9fb101ca1fb/go.mod h1:MA5e5Lr8slmEg9bt0VpxxWqJlO4iwu3FBdHUzV7wQVg=
 github.com/cjbassi/drawille-go v0.0.0-20190126131713-27dc511fe6fd h1:XtfPmj9tQRilnrEmI1HjQhxXWRhEM+m8CACtaMJE/kM=
@@ -114,6 +116,7 @@ github.com/containernetworking/cni v0.7.2-0.20190807151350-8c6c47d1c7fc h1:zUNdr
 github.com/containernetworking/cni v0.7.2-0.20190807151350-8c6c47d1c7fc/go.mod h1:LGwApLUm2FpoOfxTDEeq8T9ipbpZ61X79hmU3w8FmsY=
 github.com/containernetworking/plugins v0.8.5 h1:pCvEMrFf7yzJI8+/D/7jkvE96KD52b7/Eu+jpahihy8=
 github.com/containernetworking/plugins v0.8.5/go.mod h1:UZ2539umj8djuRQmBxuazHeJbYrLV8BSBejkk+she6o=
+github.com/coreos/bbolt v1.3.2/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
 github.com/coreos/bbolt v1.3.3 h1:n6AiVyVRKQFNb6mJlwESEvvLoDyiTzXX7ORAUlkeBdY=
 github.com/coreos/bbolt v1.3.3/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
 github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
@@ -138,6 +141,8 @@ github.com/cpuguy83/go-md2man v1.0.10 h1:BSKMNlYxDvnunlTymqtgONjNnaRV1sTpcovwwjF
 github.com/cpuguy83/go-md2man v1.0.10/go.mod h1:SmD6nW6nTyfqj6ABTjUi3V3JVMnlJmwcJI5acqYI6dE=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d h1:U+s90UTSYgptZMwQh2aRr3LuazLJIa+Pg3Kc1ylSYVY=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/cpuguy83/go-md2man/v2 v2.0.0 h1:EoUDS0afbrsXAZ9YQ9jdu/mZ2sXgT1/2yyNng4PGlyM=
+github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
 github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7DoTY=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/d2g/dhcp4 v0.0.0-20170904100407-a1d1b6c41b1c/go.mod h1:Ct2BUK8SB0YC1SMSibvLzxjeJLnrYEVLULFNiHY9YfQ=
@@ -150,6 +155,7 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dgrijalva/jwt-go v3.2.0+incompatible h1:7qlOGliEKZXTDg6OTjfoBKDXWrumCAMpl/TFQ4/5kLM=
 github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
+github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
 github.com/digitalocean/go-smbios v0.0.0-20180907143718-390a4f403a8e h1:vUmf0yezR0y7jJ5pceLHthLaYf4bA5T14B6q39S4q2Q=
 github.com/digitalocean/go-smbios v0.0.0-20180907143718-390a4f403a8e/go.mod h1:YTIHhz/QFSYnu/EhlF2SpU2Uk+32abacUYA5ZPljz1A=
 github.com/docker/distribution v2.7.1-0.20190205005809-0d3efadf0154+incompatible h1:dvc1KSkIYTVjZgHf/CTC2diTYC8PzhaA5sFISRfNVrE=
@@ -292,6 +298,7 @@ github.com/gogo/protobuf v1.3.1/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXP
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b h1:VKtxabqXZkF25pY9ekfRL6a582T4P37/31XEstQ5p58=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/groupcache v0.0.0-20160516000752-02826c3e7903/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
+github.com/golang/groupcache v0.0.0-20190129154638-5b532d6fd5ef/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20191027212112-611e8accdfc9 h1:uHTyIjqVhYRhLbJ8nIiOJHkEZZ+5YoOsAbD3sk82NiE=
 github.com/golang/groupcache v0.0.0-20191027212112-611e8accdfc9/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
@@ -352,11 +359,13 @@ github.com/gorilla/websocket v1.4.1/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/ad
 github.com/gregjones/httpcache v0.0.0-20170728041850-787624de3eb7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
 github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
 github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
+github.com/grpc-ecosystem/go-grpc-middleware v1.0.0/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
 github.com/grpc-ecosystem/go-grpc-middleware v1.0.1-0.20190118093823-f849b5445de4/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
 github.com/grpc-ecosystem/go-grpc-middleware v1.1.0 h1:THDBEeQ9xZ8JEaCLyLQqXMMdRqNr0QAUJTIkQAUtFjg=
 github.com/grpc-ecosystem/go-grpc-middleware v1.1.0/go.mod h1:f5nM7jw/oeRSadq3xCzHAvxcr8HZnzsqU6ILg/0NiiE=
 github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho=
 github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk=
+github.com/grpc-ecosystem/grpc-gateway v1.9.0/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
 github.com/grpc-ecosystem/grpc-gateway v1.9.5/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
 github.com/grpc-ecosystem/grpc-gateway v1.11.3 h1:h8+NsYENhxNTuq+dobk3+ODoJtwY4Fu0WQXsxJfL8aM=
 github.com/grpc-ecosystem/grpc-gateway v1.11.3/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
@@ -475,6 +484,7 @@ github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRW
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw=
 github.com/nsf/termbox-go v0.0.0-20190121233118-02980233997d h1:x3S6kxmy49zXVVyhcnrFqxvNVCBPb2KZ9hV2RBdS840=
 github.com/nsf/termbox-go v0.0.0-20190121233118-02980233997d/go.mod h1:IuKpRQcYE1Tfu+oAQqaLisqDeXgjyyltCfsaoYN18NQ=
+github.com/oklog/ulid v1.3.1/go.mod h1:CirwcVhetQ6Lv90oh/F+FBtV6XMibvdAFo93nm5qn4U=
 github.com/olekukonko/tablewriter v0.0.0-20170122224234-a0225b3f23b5/go.mod h1:vsDQFd/mU46D+Z4whnwzcISnGGzXWMclvtLoiIKAKIo=
 github.com/onsi/ginkgo v0.0.0-20151202141238-7f8ab55aaf3b/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v0.0.0-20170829012221-11459a886d9c/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
@@ -506,6 +516,8 @@ github.com/opencontainers/runtime-spec v1.0.3-0.20200520003142-237cc4f519e2 h1:9
 github.com/opencontainers/runtime-spec v1.0.3-0.20200520003142-237cc4f519e2/go.mod h1:jwyrGlmzljRJv/Fgzds9SsS/C5hL+LL3ko9hs6T5lQ0=
 github.com/opencontainers/runtime-tools v0.0.0-20181011054405-1d69bd0f9c39/go.mod h1:r3f7wjNzSs2extwzU3Y+6pKfobzPh+kKFJ3ofN+3nfs=
 github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
+github.com/particledecay/kconf v1.8.0 h1:DzNwbxaKJ0LW+eOcb1HhyRA9E5ztHn4PSK7uKFEaWp8=
+github.com/particledecay/kconf v1.8.0/go.mod h1:6jID/ajM4EB9aevfPTwKM61xWYu4zE1mYT6MthQscmU=
 github.com/pborman/uuid v0.0.0-20150603214016-ca53cad383ca/go.mod h1:VyrYX9gd7irzKovcSS6BIIEwPRkP2Wm2m9ufcdFSJ34=
 github.com/pborman/uuid v1.2.0 h1:J7Q5mO4ysT1dv8hyrUGHb9+ooztCXu1D8MY8DZYsu3g=
 github.com/pborman/uuid v1.2.0/go.mod h1:X/NO0urCmaxf9VXbdlT7C2Yzkj2IKimNn4k+gtPdI/k=
@@ -523,6 +535,7 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/pquerna/cachecontrol v0.0.0-20171018203845-0dec1b30a021/go.mod h1:prYjPmNq4d1NPVmpShWobRqXY3q7Vp+80DqgxxUrUIA=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
+github.com/prometheus/client_golang v0.9.3/go.mod h1:/TN21ttK/J9q6uSwhBd54HahCDft0ttaMvbicHlPoso=
 github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
 github.com/prometheus/client_golang v1.1.0 h1:BQ53HtBmfOitExawJ6LokA4x8ov/z0SYYb0+HxJfRI8=
 github.com/prometheus/client_golang v1.1.0/go.mod h1:I1FGZT9+L76gKKOs5djB6ezCbFQP1xR9D75/vuwEF3g=
@@ -532,16 +545,20 @@ github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4 h1:gQz4mCb
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.2.0 h1:uq5h0d+GuxiXLJLNABMgp2qUWDPiLvgCzz2dUR+/W/M=
 github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
+github.com/prometheus/common v0.4.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.6.0 h1:kRhiuYSXR3+uv2IbVbZhUxK5zVD/2pp3Gd2PpvPkpEo=
 github.com/prometheus/common v0.6.0/go.mod h1:eBmuwkDJBwy6iBfxCBob6t6dR6ENT/y+J+Zk0j9GMYc=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
+github.com/prometheus/procfs v0.0.0-20190507164030-5867b95ac084/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
 github.com/prometheus/procfs v0.0.0-20190522114515-bc1a522cf7b1/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
 github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
 github.com/prometheus/procfs v0.0.3/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ=
 github.com/prometheus/procfs v0.0.5/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ=
 github.com/prometheus/procfs v0.0.8 h1:+fpWZdT24pJBiqJdAwYBjPSk+5YmQzYNPYzQsdzLkt8=
 github.com/prometheus/procfs v0.0.8/go.mod h1:7Qr8sr6344vo1JqZ6HhLceV9o3AJ1Ff+GxbHq6oeK9A=
+github.com/prometheus/tsdb v0.7.1/go.mod h1:qhTCs0VvXwvX/y3TZrWD7rabWM+ijKTux40TwIPHuXU=
 github.com/rogpeppe/fastuuid v0.0.0-20150106093220-6724a57986af/go.mod h1:XWv6SoW27p1b0cqNHllgS5HIMJraePCO15w5zCzIWYg=
 github.com/rogpeppe/go-charset v0.0.0-20180617210344-2471d30d28b4/go.mod h1:qgYeAmZ5ZIpBWTGllZSQnw97Dj+woV0toclVaRGI8pc=
 github.com/rogpeppe/go-charset v0.0.0-20190617161244-0dc95cdf6f31/go.mod h1:qgYeAmZ5ZIpBWTGllZSQnw97Dj+woV0toclVaRGI8pc=
@@ -549,6 +566,8 @@ github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFR
 github.com/rogpeppe/go-internal v1.5.0/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
 github.com/rs/xid v1.2.1 h1:mhH9Nq+C1fY2l1XIpgxIiUOfNpRBYH1kKcr+qfKgjRc=
 github.com/rs/xid v1.2.1/go.mod h1:+uKXf+4Djp6Md1KODXJxgGQPKngRmWyn10oCKFzNHOQ=
+github.com/rs/zerolog v1.17.2 h1:RMRHFw2+wF7LO0QqtELQwo8hqSmqISyCJeFeAAuWcRo=
+github.com/rs/zerolog v1.17.2/go.mod h1:9nvC1axdVrAHcu/s9taAVfBuIdTZLVQmKQyvrUjF5+I=
 github.com/russross/blackfriday v1.5.2 h1:HyvC0ARfnZBqnXwABFeSZHpKvJHJJfPz81GNueLj0oo=
 github.com/russross/blackfriday v1.5.2/go.mod h1:JO/DiYxRf+HjHt06OyowR9PTA263kcR/rfWxYHBV53g=
 github.com/russross/blackfriday/v2 v2.0.1 h1:lPqVAte+HuHNfhJ/0LC98ESWRz8afy9tM/0RK8m9o+Q=
@@ -568,6 +587,7 @@ github.com/smira/go-xz v0.0.0-20150414201226-0c531f070014 h1:tne8XW3soRDJn4DIiqB
 github.com/smira/go-xz v0.0.0-20150414201226-0c531f070014/go.mod h1:smSuTvETRIkX95VAIWBdKoGJuUxif7NT7FgbkpVqOiA=
 github.com/soheilhy/cmux v0.1.4 h1:0HKaf1o97UwFjHH9o5XsHUOF+tqmdA7KEzXLpiyaw0E=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
+github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
 github.com/sparrc/go-ping v0.0.0-20190613174326-4e5b6552494c h1:gqEdF4VwBu3lTKGHS9rXE9x1/pEaSwCXRLOZRF6qtlw=
 github.com/sparrc/go-ping v0.0.0-20190613174326-4e5b6552494c/go.mod h1:eMyUVp6f/5jnzM+3zahzl7q6UXLbgSc3MKg/+ow9QW0=
 github.com/spf13/afero v1.1.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
@@ -578,6 +598,8 @@ github.com/spf13/cobra v0.0.0-20170515075120-4cdb38c072b8/go.mod h1:1l0Ry5zgKvJa
 github.com/spf13/cobra v0.0.3/go.mod h1:1l0Ry5zgKvJasoi3XT1TypsSe7PqH0Sj9dhYf7v3XqQ=
 github.com/spf13/cobra v0.0.5 h1:f0B+LkLX6DtmRH1isoNA9VTtNUK9K8xYd28JNNfOv/s=
 github.com/spf13/cobra v0.0.5/go.mod h1:3K3wKZymM7VvHMDS9+Akkh4K60UwM26emMESw8tLCHU=
+github.com/spf13/cobra v1.0.0 h1:6m/oheQuQ13N9ks4hubMG6BnvwOeaJrqSPLahSnczz8=
+github.com/spf13/cobra v1.0.0/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/pflag v0.0.0-20170130214245-9ff6c6923cff/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/spf13/pflag v1.0.1/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
@@ -585,6 +607,7 @@ github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnIn
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
 github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/viper v1.3.2/go.mod h1:ZiWeW+zYFKm7srdB9IoDzzZXaJaI5eL9QjNiN/DMA2s=
+github.com/spf13/viper v1.4.0/go.mod h1:PTJ7Z/lr49W6bUbkmS1V3by4uWynFiR9p7+dSq/yZzE=
 github.com/stretchr/objx v0.0.0-20180129172003-8a3f7159479f/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
@@ -618,6 +641,7 @@ github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5 h1:LnC5Kc
 github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
 github.com/u-root/u-root v6.0.0+incompatible h1:YqPGmRoRyYmeg17KIWFRSyVq6LX5T6GSzawyA6wG6EE=
 github.com/u-root/u-root v6.0.0+incompatible/go.mod h1:RYkpo8pTHrNjW08opNd/U6p/RJE7K0D8fXO0d47+3YY=
+github.com/ugorji/go v1.1.4/go.mod h1:uQMGLiO92mf5W77hV/PUCpI3pbzQx3CRekS0kk+RGrc=
 github.com/ugorji/go v1.1.7/go.mod h1:kZn38zHttfInRq0xu/PH0az30d+z6vm202qpg1oXVMw=
 github.com/ugorji/go/codec v0.0.0-20181204163529-d75b2dcb6bc8/go.mod h1:VFNgLljTbGfSG7qAOspJ7OScBnGdDN/yBr0sguwnwf0=
 github.com/ugorji/go/codec v1.1.7/go.mod h1:Ax+UKWsSmolVDwsd+7N3ZtXu+yMGCf907BLYF3GoBXY=
@@ -646,6 +670,9 @@ github.com/xeipuuv/gojsonschema v0.0.0-20180618132009-1d523034197f/go.mod h1:5yf
 github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2 h1:eY9dn8+vbi4tKz5Qo6v2eYzo7kUS51QINcR5jNpbZS8=
 github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU=
 github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q=
+github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/zenazn/goji v0.9.0/go.mod h1:7S9M489iMyHBNxwZnk9/EHS098H4/F6TATF2mIxtB1Q=
+go.etcd.io/bbolt v1.3.2/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=
 go.etcd.io/bbolt v1.3.3 h1:MUGmc65QhB3pIlaQ5bB4LwqSj6GIonVJXpZiaKNyaKk=
 go.etcd.io/bbolt v1.3.3/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=
 go.etcd.io/bbolt v1.3.4 h1:hi1bXHMVrlQh6WwxAy+qZCV/SYIlqo+Ushwdpa4tAKg=
@@ -688,9 +715,13 @@ golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8U
 golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190611184440-5c40567a22f8/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190617133340-57b3e21c3d56/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20191108234033-bd318be0434a/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200220183623-bac4c82f6975 h1:/Tl7pH94bvbAAHBdZJT947M/+gp0+CqQXDtMRC0fseo=
 golang.org/x/crypto v0.0.0-20200220183623-bac4c82f6975/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 h1:psW17arqaxU48Z5kZ0CQnkZWQJsqcURM6tKiBApRjXI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -716,6 +747,8 @@ golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCc
 golang.org/x/mobile v0.0.0-20191031020345-0945064e013a/go.mod h1:p895TfNkDgPEmEQrNiOtIl3j98d/tGU95djDj7NfyjQ=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
 golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY=
+golang.org/x/mod v0.3.0 h1:RM4zey1++hCTbCVQfnWeKs9/IEsaBLA8vTkd0WVtmH4=
+golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/net v0.0.0-20170114055629-f2499483f923/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -732,6 +765,7 @@ golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn
 golang.org/x/net v0.0.0-20190419010253-1f3472d942ba/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190501004415-9ce7a6920f09/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190503192946-f4e77d36d62c/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190522155817-f3200d17e092/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
 golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
 golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
@@ -741,12 +775,14 @@ golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20191004110552-13f9640d40b9/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20191007182048-72f939374954/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20191109021931-daa7c04131f5/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553 h1:efeOvDhwQ29Dj3SdAV/MJf8oukgn+8D8WgaCaRMchF8=
-golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344 h1:vGXIOMxbNfDTk/aXCmfdLgkrSV+Z2tcbze+pEc3v5W4=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45 h1:SVwTIAaPC2U/AvvLNZ2a7OVsmBpC8L5BlwK1whH3hm0=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
+golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d h1:TzXSXBo42m9gQenoE3b9BGiEpg5IG2JkU5FkPIawgtw=
+golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -754,6 +790,8 @@ golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e h1:vcxGaoTs7kV8m5Np9uUNQin4BrLOthgV7252N8V+FwY=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208 h1:qwRHBd0NqMbJxfbotnDhm2ByMI1Shq4Y6oRJo21SGJA=
+golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sys v0.0.0-20170830134202-bb24a47a89ea/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -789,6 +827,7 @@ golang.org/x/sys v0.0.0-20191210023423-ac6580df4449/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20200202164722-d101bd2416d5 h1:LfCXLvNmTYH9kEmVgqbnsWfruoXZIrh4YBgqVHtDvw0=
 golang.org/x/sys v0.0.0-20200202164722-d101bd2416d5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200217220822-9197077df867/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200625212154-ddb9806d33ae h1:Ih9Yo4hSPImZOpfGuA4bR/ORKTAbhZo2AbWNRCnevdo=
 golang.org/x/sys v0.0.0-20200625212154-ddb9806d33ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/text v0.0.0-20160726164857-2910a502d2bf/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -820,6 +859,7 @@ golang.org/x/tools v0.0.0-20190617190820-da514acc4774/go.mod h1:/rFqwRUd4F7ZHNgw
 golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
 golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
 golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20190828213141-aed303cbaa74/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20190909214602-067311248421/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20190920225731-5eefd052ad72/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
@@ -832,6 +872,9 @@ golang.org/x/tools v0.0.0-20191029190741-b9c20aec41a5/go.mod h1:b+2E5dAYhXwXZwtn
 golang.org/x/tools v0.0.0-20191105231337-689d0f08e67a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191111154804-8cb0d02132ec h1:poMzDCrMtA4fJ5uWN0ZsAvrOiMhgdHmTW6m6i4+Xu2I=
 golang.org/x/tools v0.0.0-20191111154804-8cb0d02132ec/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200710042808-f1c4188a97a1 h1:rD1FcWVsRaMY+l8biE9jbWP5MS/CJJ/90a9TMkMgNrM=
+golang.org/x/tools v0.0.0-20200710042808-f1c4188a97a1/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898 h1:/atklqdjdhuosWIl6AIbOeHJjicWYPqR9bpxqxYG2pA=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -930,6 +973,7 @@ inet.af/tcpproxy v0.0.0-20200125044825-b6bb9b5b8252 h1:gmJCKidOfjKDUHF1jjke+I+2i
 inet.af/tcpproxy v0.0.0-20200125044825-b6bb9b5b8252/go.mod h1:zq+R+tLcdHugi7Jt+FtIQY6m6wtX34lr2CdQVH2fhW0=
 k8s.io/api v0.0.0-20191016110408-35e52d86657a/go.mod h1:/L5qH+AD540e7Cetbui1tuJeXdmNhO8jM6VkXeDdDhQ=
 k8s.io/api v0.0.0-20191109101513-0171b7c15da1/go.mod h1:VJq7+38rpM4TSUbRiZX4P5UVAKK2UQpNQLZClkFQkpE=
+k8s.io/api v0.17.0/go.mod h1:npsyOePkeP0CPwyGfXDHxvypiYMJxBWAMpQxCaJ4ZxI=
 k8s.io/api v0.18.0 h1:lwYk8Vt7rsVTwjRU6pzEsa9YNhThbmbocQlKvNBB4EQ=
 k8s.io/api v0.18.0/go.mod h1:q2HRQkfDzHMBZL9l/y9rH63PkQl4vae0xRT+8prbrK8=
 k8s.io/api v0.18.2 h1:wG5g5ZmSVgm5B+eHMIbI9EGATS2L8Z72rda19RIEgY8=
@@ -940,12 +984,14 @@ k8s.io/apiextensions-apiserver v0.18.2/go.mod h1:q3faSnRGmYimiocj6cHQ1I3WpLqmDgJ
 k8s.io/apimachinery v0.0.0-20191004115801-a2eda9f80ab8/go.mod h1:llRdnznGEAqC3DcNm6yEj472xaFVfLM7hnYofMb12tQ=
 k8s.io/apimachinery v0.0.0-20191109100837-dffb012825f2/go.mod h1:+6CX7hP4aLfX2sb91JYDMIp0VqDSog2kZu0BHe+lP+s=
 k8s.io/apimachinery v0.0.0-20191111054156-6eb29fdf75dc/go.mod h1:+6CX7hP4aLfX2sb91JYDMIp0VqDSog2kZu0BHe+lP+s=
+k8s.io/apimachinery v0.17.0/go.mod h1:b9qmWdKlLuU9EBh+06BtLcSf/Mu89rWL33naRxs1uZg=
 k8s.io/apimachinery v0.18.0 h1:fuPfYpk3cs1Okp/515pAf0dNhL66+8zk8RLbSX+EgAE=
 k8s.io/apimachinery v0.18.0/go.mod h1:9SnR/e11v5IbyPCGbvJViimtJ0SwHG4nfZFjU77ftcA=
 k8s.io/apimachinery v0.18.2 h1:44CmtbmkzVDAhCpRVSiP2R5PPrC2RtlIv/MoB8xpdRA=
 k8s.io/apimachinery v0.18.2/go.mod h1:9SnR/e11v5IbyPCGbvJViimtJ0SwHG4nfZFjU77ftcA=
 k8s.io/apiserver v0.18.2/go.mod h1:Xbh066NqrZO8cbsoenCwyDJ1OSi8Ag8I2lezeHxzwzw=
 k8s.io/client-go v0.0.0-20191016111102-bec269661e48/go.mod h1:hrwktSwYGI4JK+TJA3dMaFyyvHVi/aLarVHpbs8bgCU=
+k8s.io/client-go v0.17.0/go.mod h1:TYgR6EUHs6k45hb6KWjVD6jFZvJV4gHDikv/It0xz+k=
 k8s.io/client-go v0.18.2 h1:aLB0iaD4nmwh7arT2wIn+lMnAq7OswjaejkQ8p9bBYE=
 k8s.io/client-go v0.18.2/go.mod h1:Xcm5wVGXX9HAA2JJ2sSBUn3tCJ+4SVlCbl2MNNv+CIU=
 k8s.io/code-generator v0.18.2/go.mod h1:+UHX5rSbxmR8kzS+FAv7um6dtYrZokQvjHpDSYRVkTc=
@@ -970,6 +1016,8 @@ k8s.io/kubernetes v1.13.0 h1:qTfB+u5M92k2fCCCVP2iuhgwwSOv1EkAkvQY1tQODD8=
 k8s.io/kubernetes v1.13.0/go.mod h1:ocZa8+6APFNC2tX1DZASIbocyYT5jHzqFVsY5aoB7Jk=
 k8s.io/utils v0.0.0-20190801114015-581e00157fb1/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20191030222137-2b95a09bc58d/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
+k8s.io/utils v0.0.0-20191114184206-e782cd3c129f/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
+k8s.io/utils v0.0.0-20200109141947-94aeca20bf09/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20200324210504-a9aa75ae1b89 h1:d4vVOjXm687F1iLSP2q3lyPPuyvTUt3aVoBpi2DqRsU=
 k8s.io/utils v0.0.0-20200324210504-a9aa75ae1b89/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
diff --git a/internal/integration/cli/kubeconfig.go b/internal/integration/cli/kubeconfig.go
index faf27c2a2..0c9f21a22 100644
--- a/internal/integration/cli/kubeconfig.go
+++ b/internal/integration/cli/kubeconfig.go
@@ -12,6 +12,8 @@ import (
 	"path/filepath"
 	"regexp"
 
+	"k8s.io/client-go/tools/clientcmd"
+
 	"github.com/talos-systems/talos/internal/integration/base"
 )
 
@@ -35,9 +37,11 @@ func (suite *KubeconfigSuite) TestDirectory() {
 	suite.RunCLI([]string{"kubeconfig", tempDir},
 		base.StdoutEmpty())
 
-	suite.Require().FileExists(filepath.Join(tempDir, "kubeconfig"))
+	path := filepath.Join(tempDir, "kubeconfig")
+	suite.Require().FileExists(path)
 
-	// TODO: launch kubectl with config to verify it
+	_, err = clientcmd.LoadFromFile(path)
+	suite.Require().NoError(err)
 }
 
 // TestCwd generates kubeconfig in cwd.
@@ -69,6 +73,25 @@ func (suite *KubeconfigSuite) TestMultiNodeFail() {
 		base.StderrShouldMatch(regexp.MustCompile(`is not supported with multiple nodes`)))
 }
 
+// TestMerge test merge config into existing kubeconfig
+func (suite *KubeconfigSuite) TestMerge() {
+	tempDir, err := ioutil.TempDir("", "talos")
+	suite.Require().NoError(err)
+
+	defer os.RemoveAll(tempDir) //nolint: errcheck
+
+	path := filepath.Join(tempDir, "config")
+
+	suite.RunCLI([]string{"kubeconfig", path, "-m"},
+		base.StdoutEmpty())
+	suite.RunCLI([]string{"kubeconfig", path, "-m"})
+
+	config, err := clientcmd.LoadFromFile(path)
+	suite.Require().NoError(err)
+
+	suite.Require().Equal(len(config.Contexts), 2)
+}
+
 func init() {
 	allSuites = append(allSuites, new(KubeconfigSuite))
 }