Hi, it's been a while since I looked into this stuff so I'll try my best. I think the token in the HTML is able to differ each time because of the way encryption works. Encryption adds a salt which means the same value can be encrypted multiple times and have different results. If this wasn't the case, it'd be easy for someone to find patterns and break the encryption.
Have you tried opening two tabs? I wouldn't have thought the first one would become invalid because nothing on the server changes between requests in terms of generating these tokens. The tokens are related to each other, not to anything on the server. I can't answer your last question because I don't know what a k8 and a pod is.