Would have been helpful except …. you are using a role that can deal with secrets, but you are also patching a service account. Looks like that’s not included in the rights.