Same question was asked here. This seems to possibly be a k8s-specific rbac issue, something like this for example?