Skip to content

Use specified ServiceAccountName in RoleBinding#869

Open
toomasp wants to merge 1 commit intocloudnative-pg:mainfrom
toomasp:correct-cluster-serviceaccount
Open

Use specified ServiceAccountName in RoleBinding#869
toomasp wants to merge 1 commit intocloudnative-pg:mainfrom
toomasp:correct-cluster-serviceaccount

Conversation

@toomasp
Copy link
Copy Markdown

@toomasp toomasp commented Apr 22, 2026

Currently backup fails due to incorrect serviceAccount being used in the rolebinding, ie:

rpc error: code = Unknown desc = objectstores.barmancloud.cnpg.io "test123-postgresql-objectstore" is forbidden: User "system:serviceaccount:test123:custom-sa" cannot get resource "objectstores" in API group "barmancloud.cnpg.io" in the namespace "test123"

The cluster was created with spec.serviceAccountName set.

Signed-off-by: Toomas Pelberg <toomasp@gmx.net>
@toomasp toomasp requested a review from a team as a code owner April 22, 2026 12:43
@dosubot dosubot Bot added size:XS This PR changes 0-9 lines, ignoring generated files. bug Something isn't working labels Apr 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant