Does the Client Certificate have Admin Access to the cluster? Non-admin clients can only perform read only operations on the cluster.