This was using k8S_AUTH_CONTEXT with a lowercase k. That doesn't match with any of the other K8s stuff so users would probably be confused why their envvar wasn't working.