klog.V(1).Infoln("[upgrade/version] enforcing version skew policies")
	allowRCUpgrades, ok := cmdutil.ValueFromFlagsOrConfig(flagSet, options.AllowRCUpgrades, upgradeCfg.Apply.AllowRCUpgrades, &flags.allowRCUpgrades).(*bool)
	if ok {
		flags.allowRCUpgrades = *allowRCUpgrades
	} else {
		return cmdutil.TypeMismatchErr("allowRCUpgrades", "bool")
	}

	*out = *in
	if in.AllowExperimentalUpgrades != nil {
		in, out := &in.AllowExperimentalUpgrades, &out.AllowExperimentalUpgrades
		*out = new(bool)
		**out = **in
	}
	if in.AllowRCUpgrades != nil {
		in, out := &in.AllowRCUpgrades, &out.AllowRCUpgrades
		*out = new(bool)
		**out = **in
	}
	if in.CertificateRenewal != nil {
		in, out := &in.CertificateRenewal, &out.CertificateRenewal
		*out = new(bool)
		**out = **in

	*out = *in
	if in.AllowExperimentalUpgrades != nil {
		in, out := &in.AllowExperimentalUpgrades, &out.AllowExperimentalUpgrades
		*out = new(bool)
		**out = **in
	}
	if in.AllowRCUpgrades != nil {
		in, out := &in.AllowRCUpgrades, &out.AllowRCUpgrades
		*out = new(bool)
		**out = **in
	}
	if in.CertificateRenewal != nil {
		in, out := &in.CertificateRenewal, &out.CertificateRenewal
		*out = new(bool)
		**out = **in

	out.KubernetesVersion = in.KubernetesVersion
	out.AllowExperimentalUpgrades = (*bool)(unsafe.Pointer(in.AllowExperimentalUpgrades))
	out.AllowRCUpgrades = (*bool)(unsafe.Pointer(in.AllowRCUpgrades))
	out.CertificateRenewal = (*bool)(unsafe.Pointer(in.CertificateRenewal))
	out.DryRun = (*bool)(unsafe.Pointer(in.DryRun))
	out.EtcdUpgrade = (*bool)(unsafe.Pointer(in.EtcdUpgrade))

	// +optional
	AllowExperimentalUpgrades *bool `json:"allowExperimentalUpgrades,omitempty"`

	// Enable AllowRCUpgrades will show release candidate versions of Kubernetes as an upgrade alternative and
	// allows upgrading to a release candidate version of Kubernetes.
	// +optional
	AllowRCUpgrades *bool `json:"allowRCUpgrades,omitempty"`

	// CertificateRenewal instructs kubeadm to execute certificate renewal during upgrades.

	// Default: false
	AllowExperimentalUpgrades *bool

	// Enable AllowRCUpgrades will show release candidate versions of Kubernetes as an upgrade alternative and
	// allows upgrading to a release candidate version of Kubernetes.
	AllowRCUpgrades *bool

	// CertificateRenewal instructs kubeadm to execute certificate renewal during upgrades.
	CertificateRenewal *bool