Super UserI did rely on AI to kludge my way through this process, because I've never had to do it before. Thus far my experience managing RBAC on kuberneties has been leveraging OIDC with some form of SSO, like LDAP (Active Directory/FreeIPA).
This was a learning experience for me.