User "system:serviceaccount:NAMESPACE:default" cannot get imagestreams/layers in project "NAMESPACE"

Issue

• I am unable to pull images from a namespace using the provided service account.

time="2017-03-24T13:44:25.111035536Z" level=debug msg="authorizing request" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
time="2017-03-24T13:44:25.111184117Z" level=debug msg="Origin auth: checking for access to repository:NAMESPACE/IMAGE:pull" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
time="2017-03-24T13:44:25.116497945Z" level=error msg="OpenShift access denied: User \"system:serviceaccount:NAMESPACE:default\" cannot get imagestreams/layers in project \"NAMESPACE\"" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
time="2017-03-24T13:44:25.116618053Z" level=error msg="error authorizing context: access denied" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
10.1.2.1 - - [24/Mar/2017:13:44:25 +0000] "GET /v2/NAMESPACE/IMAGE/manifests/0.0.2 HTTP/1.1" 401 148 "" "docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64"