Cause: A client used for gathering the poddisruptionbudgets uses the operator service account instead of the gather account. Consequence: The operator service account has way more privileges then the gather account so creating a client using the former gives that client unnecessary permissions. (It also makes the manifests a bit confusing) Fix: Use the gahter service account to create the client. Result: The client that gathers the poddisruptionbudgets has only the minimum amount of permissions to do its job.