cannot get resource "manifests" in API group "akash.network" in the namespace "lease"

manifests.akash.network "oghopu3hsa0tmrg8otckau6l7s9a98kct2b5de22rtese" is forbidden: User "system:serviceaccount:akash-services:akash-provider" cannot get resource "manifests" in API group "akash.network" in the namespace "lease"

{"level":"error","time":"2025-08-04T15:23:01.698Z","pid":41,"hostname":"provider-proxy-5c4c9b6bf-vhtbr","name":"app","traceId":"111e597cff2d257e0ab7f5c995ec4ec0","spanId":"35ecc755bd8d703b","traceFlags":1,"event":"PROXY_REQUEST_ERROR","url":"https://provider.65.186.218.149.nip.io:8443/lease/22702269/1/1/status","method":"GET","network":"mainnet","providerAddress":"akash12l57jekzte229544ketqtq675tdlxcgs9xcjv7","httpResponse":{"status":500,"headers":{"content-type":"text/plain; charset=utf-8","x-content-type-options":"nosniff","date":"Mon, 04 Aug 2025 15:23:01 GMT","content-length":"231","connection":"close"},"body":"manifests.akash.network "oghopu3hsa0tmrg8otckau6l7s9a98kct2b5de22rtese" is forbidden: User "system:serviceaccount:akash-services:akash-provider" cannot get resource "manifests" in API group "akash.network" in the namespace "lease"\n"}}

Start by tracing the provider proxy GET request for the lease status endpoint and the Kubernetes permissions for the akash-provider service account in the lease namespace. Confirm the manifests resource access in the akash.network API group, then reproduce the request to verify it no longer returns the reported forbidden error.