Yes I believe Docker/AKS somewhat recently defaulted to least privelege for container users, so you end up having to explicitly grant access to every little thing...