https://kyungryeol-yoon.github.io/posts/kubernetes-command-auth-reconcile/