cannot impersonate serviceaccount

[raffaelespazzoli]

when trying to impersonate a service account the following error is generated:

Failed sync attempt to 0.1.9: one or more objects failed to apply, reason: admission webhook "patch-operator-inject.redhatcop.redhat.io" denied the request: template: spec: instanceID: {{ (lookup "dbaas.redhat.com" "DBaaSConnection" "myapp-dev" "mydb-dev").status.instanceID }} :2:18: executing "spec:\n instanceID: {{ (lookup \"dbaas.redhat.com\" \"DBaaSConnection\" \"myapp-dev\" \"mydb-dev\").status.instanceID }}\n" at <lookup "dbaas.redhat.com" "DBaaSConnection" "myapp-dev" "mydb-dev">: error calling lookup: userextras.authentication.k8s.io "d35c3f41-fd65-4d28-a99d-f7bf8a4fe493" is forbidden: User "system:serviceaccount:patch-operator:controller-manager" cannot impersonate resource "userextras/authentication.kubernetes.io/pod-uid" in API group "authentication.k8s.io" at the cluster scope