diff --git a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/types_go_gen.cue b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/types_go_gen.cue
index da9047c..f3caa9a 100644
--- a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/types_go_gen.cue
+++ b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/types_go_gen.cue
@@ -20,6 +20,9 @@
 // NamespaceNodeLease is the namespace where we place node lease objects (used for node heartbeats)
 NamespaceNodeLease :: "kube-node-lease"
 
+// TopologyKeyAny is the service topology key that matches any node
+TopologyKeyAny :: "*"
+
 // Volume represents a named volume in a pod that may be accessed by any container in the pod.
 Volume :: {
 	// Volume's name.
@@ -2096,7 +2099,7 @@
 // EnvVarSource represents a source for the value of an EnvVar.
 EnvVarSource :: {
 	// Selects a field of the pod: supports metadata.name, metadata.namespace, metadata.labels, metadata.annotations,
-	// spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP.
+	// spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
 	// +optional
 	fieldRef?: null | ObjectFieldSelector @go(FieldRef,*ObjectFieldSelector) @protobuf(1,bytes,opt)
 
@@ -3291,7 +3294,6 @@
 	// in the same pod, and the first process in each container will not be assigned PID 1.
 	// HostPID and ShareProcessNamespace cannot both be set.
 	// Optional: Default to false.
-	// This field is beta-level and may be disabled with the PodShareProcessNamespace feature.
 	// +k8s:conversion-gen=false
 	// +optional
 	shareProcessNamespace?: null | bool @go(ShareProcessNamespace,*bool) @protobuf(27,varint,opt)
@@ -4229,6 +4231,9 @@
 // IPv6Protocol indicates that this IP is IPv6 protocol
 IPv6Protocol :: IPFamily & "IPv6"
 
+// MaxServiceTopologyKeys is the largest number of topology keys allowed on a service
+MaxServiceTopologyKeys :: 16
+
 // ServiceSpec describes the attributes that a user creates on a service.
 ServiceSpec :: {
 	// The list of ports that are exposed by this service.
@@ -4355,6 +4360,21 @@
 	// cluster (e.g. IPv6 in IPv4 only cluster) is an error condition and will fail during clusterIP assignment.
 	// +optional
 	ipFamily?: null | IPFamily @go(IPFamily,*IPFamily) @protobuf(15,bytes,opt,Configcasttype=IPFamily)
+
+	// topologyKeys is a preference-order list of topology keys which
+	// implementations of services should use to preferentially sort endpoints
+	// when accessing this Service, it can not be used at the same time as
+	// externalTrafficPolicy=Local.
+	// Topology keys must be valid label keys and at most 16 keys may be specified.
+	// Endpoints are chosen based on the first topology key with available backends.
+	// If this field is specified and all entries have no backends that match
+	// the topology of the client, the service has no backends for that client
+	// and connections should fail.
+	// The special value "*" may be used to mean "any topology". This catch-all
+	// value, if used, only makes sense as the last value in the list.
+	// If this is not specified or empty, no topology constraints will be applied.
+	// +optional
+	topologyKeys?: [...string] @go(TopologyKeys,[]string) @protobuf(16,bytes,opt)
 }
 
 // ServicePort contains information on service's port.
@@ -5100,6 +5120,10 @@
 // NamespaceTerminating means the namespace is undergoing graceful termination
 NamespaceTerminating :: NamespacePhase & "Terminating"
 
+// NamespaceTerminatingCause is returned as a defaults.cause item when a change is
+// forbidden due to the namespace being terminated.
+NamespaceTerminatingCause :: metav1.CauseType & "NamespaceTerminating"
+
 NamespaceConditionType :: string // enumNamespaceConditionType
 
 enumNamespaceConditionType ::
@@ -6277,7 +6301,7 @@
 	// Defaults to the user specified in image metadata if unspecified.
 	// May also be set in PodSecurityContext. If set in both SecurityContext and
 	// PodSecurityContext, the value specified in SecurityContext takes precedence.
-	// This field is alpha-level and it is only honored by servers that enable the WindowsRunAsUserName feature flag.
+	// This field is beta-level and may be disabled with the WindowsRunAsUserName feature flag.
 	// +optional
 	runAsUserName?: null | string @go(RunAsUserName,*string) @protobuf(3,bytes,opt)
 }
diff --git a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/well_known_labels_go_gen.cue b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/well_known_labels_go_gen.cue
index 69f2086..33525fd 100644
--- a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/well_known_labels_go_gen.cue
+++ b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/well_known_labels_go_gen.cue
@@ -4,12 +4,19 @@
 
 package v1
 
-LabelHostname ::          "kubernetes.io/hostname"
-LabelZoneFailureDomain :: "failure-domain.beta.kubernetes.io/zone"
-LabelZoneRegion ::        "failure-domain.beta.kubernetes.io/region"
-LabelInstanceType ::      "beta.kubernetes.io/instance-type"
-LabelOSStable ::          "kubernetes.io/os"
-LabelArchStable ::        "kubernetes.io/arch"
+LabelHostname ::                "kubernetes.io/hostname"
+LabelZoneFailureDomain ::       "failure-domain.beta.kubernetes.io/zone"
+LabelZoneRegion ::              "failure-domain.beta.kubernetes.io/region"
+LabelZoneFailureDomainStable :: "topology.kubernetes.io/zone"
+LabelZoneRegionStable ::        "topology.kubernetes.io/region"
+LabelInstanceType ::            "beta.kubernetes.io/instance-type"
+LabelInstanceTypeStable ::      "node.kubernetes.io/instance-type"
+LabelOSStable ::                "kubernetes.io/os"
+LabelArchStable ::              "kubernetes.io/arch"
+
+// LabelWindowsBuild is used on Windows nodes to specify the Windows build number starting with v1.17.0.
+// It's in the format MajorVersion.MinorVersion.BuildNumber (for ex: 10.0.17763)
+LabelWindowsBuild :: "node.kubernetes.io/windows-build"
 
 // LabelNamespaceSuffixKubelet is an allowed label namespace suffix kubelets can self-set ([*.]kubelet.kubernetes.io/*)
 LabelNamespaceSuffixKubelet :: "kubelet.kubernetes.io"
diff --git a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/well_known_taints_go_gen.cue b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/well_known_taints_go_gen.cue
new file mode 100644
index 0000000..c6f06b6
--- /dev/null
+++ b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/api/core/v1/well_known_taints_go_gen.cue
@@ -0,0 +1,41 @@
+// Code generated by cue get go. DO NOT EDIT.
+
+//cue:generate cue get go k8s.io/api/core/v1
+
+package v1
+
+// TaintNodeNotReady will be added when node is not ready
+// and feature-gate for TaintBasedEvictions flag is enabled,
+// and removed when node becomes ready.
+TaintNodeNotReady :: "node.kubernetes.io/not-ready"
+
+// TaintNodeUnreachable will be added when node becomes unreachable
+// (corresponding to NodeReady status ConditionUnknown)
+// and feature-gate for TaintBasedEvictions flag is enabled,
+// and removed when node becomes reachable (NodeReady status ConditionTrue).
+TaintNodeUnreachable :: "node.kubernetes.io/unreachable"
+
+// TaintNodeUnschedulable will be added when node becomes unschedulable
+// and feature-gate for TaintNodesByCondition flag is enabled,
+// and removed when node becomes scheduable.
+TaintNodeUnschedulable :: "node.kubernetes.io/unschedulable"
+
+// TaintNodeMemoryPressure will be added when node has memory pressure
+// and feature-gate for TaintNodesByCondition flag is enabled,
+// and removed when node has enough memory.
+TaintNodeMemoryPressure :: "node.kubernetes.io/memory-pressure"
+
+// TaintNodeDiskPressure will be added when node has disk pressure
+// and feature-gate for TaintNodesByCondition flag is enabled,
+// and removed when node has enough disk.
+TaintNodeDiskPressure :: "node.kubernetes.io/disk-pressure"
+
+// TaintNodeNetworkUnavailable will be added when node's network is unavailable
+// and feature-gate for TaintNodesByCondition flag is enabled,
+// and removed when network becomes ready.
+TaintNodeNetworkUnavailable :: "node.kubernetes.io/network-unavailable"
+
+// TaintNodePIDPressure will be added when node has pid pressure
+// and feature-gate for TaintNodesByCondition flag is enabled,
+// and removed when node has enough disk.
+TaintNodePIDPressure :: "node.kubernetes.io/pid-pressure"
diff --git a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/types_go_gen.cue b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/types_go_gen.cue
index 0ab7472..866ab4e 100644
--- a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/types_go_gen.cue
+++ b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/types_go_gen.cue
@@ -455,6 +455,7 @@
 
 	// Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be
 	// returned.
+	// +k8s:conversion-gen=false
 	// +optional
 	preconditions?: null | Preconditions @go(Preconditions,*Preconditions) @protobuf(2,bytes,opt)
 
diff --git a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/interfaces_go_gen.cue b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/interfaces_go_gen.cue
index e071cde..e341df8 100644
--- a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/interfaces_go_gen.cue
+++ b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/interfaces_go_gen.cue
@@ -86,6 +86,11 @@
 // that performs HTTP content negotiation to accept multiple formats.
 NegotiatedSerializer :: _
 
+// ClientNegotiator handles turning an HTTP content type into the appropriate encoder.
+// Use NewClientNegotiator or NewVersionedClientNegotiator to create this interface from
+// a NegotiatedSerializer.
+ClientNegotiator :: _
+
 // StorageSerializer is an interface used for obtaining encoders, decoders, and serializers
 // that can read and write data at rest. This would commonly be used by client tools that must
 // read files, or server side storage interfaces that persist restful objects.
diff --git a/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/negotiate_go_gen.cue b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/negotiate_go_gen.cue
new file mode 100644
index 0000000..50756a8
--- /dev/null
+++ b/doc/tutorial/kubernetes/quick/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/negotiate_go_gen.cue
@@ -0,0 +1,12 @@
+// Code generated by cue get go. DO NOT EDIT.
+
+//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
+
+package runtime
+
+// NegotiateError is returned when a ClientNegotiator is unable to locate
+// a serializer for the requested operation.
+NegotiateError :: {
+	ContentType: string
+	Stream:      bool
+}