+```release-note:improvement
+auth/kubernetes: validate JWT against the provided role on alias look ahead operations
+```