Okay
I knew it would be something "stupid" :-). So the problem was that my kind: ClusterRole / apiVersion: rbac.authorization.k8s.io/v1 was missing
- apiGroups:
- traefik.containo.us
resources:
- middlewares
- middlewaretcps
- ingressroutes
- traefikservices
- ingressroutetcps
- ingressrouteudps
- tlsoptions
- tlsstores
- serverstransports
verbs:
- get
- list
- watch
which is the whole point of course.
Okay it's fixed now