new pods do not run due to rbac issues?

Hello
i have juju core kubernetes running but i can not get any pods to run
this is one error i get :

kubectl logs -n rook-ceph-system rook-ceph-operator-7ddc9c6f8f-jnlkx
2019-01-23 14:14:35.681619 I | rookcmd: starting Rook v0.9.0-79.g1a1ffdd with arguments '/usr/local/bin/rook ceph operator'
2019-01-23 14:14:35.681670 I | rookcmd: flag values: --alsologtostderr=false, --help=false, --log-level=INFO, --log_backtrace_at=:0, --log_dir=, --logtostderr=true, --mon-healthcheck-interval=45s, --mon-out-timeout=5m0s, --stderrthreshold=2, --v=0, --vmodule=
2019-01-23 14:14:35.682476 I | cephcmd: starting operator
2019-01-23 14:14:35.785236 I | op-agent: getting flexvolume dir path from FLEXVOLUME_DIR_PATH env var
2019-01-23 14:14:35.785254 I | op-agent: flexvolume dir path env var FLEXVOLUME_DIR_PATH is not provided. Defaulting to: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/
2019-01-23 14:14:35.785258 I | op-agent: discovered flexvolume dir path from source default. value: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/
2019-01-23 14:14:35.785261 I | op-agent: no agent mount security mode given, defaulting to '%s' modeAny
failed to run operator. Error starting agent daemonset: error starting agent daemonset: failed to create rook-ceph-agent daemon set. DaemonSet.apps "rook-ceph-agent" is invalid: spec.template.spec.containers[0].securityContext.privileged: Forbidden: disallowed by cluster policy

i have done this :

juju config kubernetes-master authorization-mode=RBAC,Node

any tips how to get this to work ?
thanks