I have a Kubernetes 1.10 cluster up and running. Using the following command, I create a container running bash inside the cluster:

```
kubectl run tmp-shell --rm -i --tty --image centos -- /bin/bash

```

I download the correct version of kubectl inside the running container, make it executable and try to run

```
./kubectl get pods

```

but get the following error:

```
Error from server (Forbidden): pods is forbidden:
User "system:serviceaccount:default:default" cannot
list pods in the namespace "default"

```

Does this mean, that kubectl detected it is running inside a cluster and is automatically connecting to that one? How do I allow the serviceaccount to list the pods? My final goal will be to run `helm` inside the container. According to the docs I found, this should work fine as soon as `kubectl` is working fine.