Static Token Revocation vs. RBAC Granularity in K3s
K3s Authentication Trade-off The goal is to enforce least-privilege access using K3s. Constraint Static tokens are used for initial cluster access, but automated rotation is not natively provided. Does relying on strict RBAC policy definition sufficiently mitigate the risk of an unrotated, long-lived static token? What is the practical impact of using an ext