Provisioned a scoped read-only ServiceAccount and generated a kubeconfig for remote operator access.
kubectl-readonly
kube-system
view
runbooks/kubernetes-readonly-kubeconfig.md