Does Teleport re-evaluate aggregated role rules per request or cache them per certificate?
I am designing access revocation for Teleport-managed SSH, Kubernetes, and database targets. When a user holds multiple roles, Teleport aggregates those role rules into a short-lived certificate. I need to know whether Teleport re-evaluates the aggregated role rules on every proxied request, or caches them for the certificate or session lifetime. Role edits
teleport