portainer/portainer · error

failed to get service account %q: %w

Error message

failed to get service account %q: %w

What it means

Error "failed to get service account %q: %w" thrown in portainer/portainer.

Source

Thrown at api/kubernetes/cli/service_account.go:365

			continue
		}
		updated = append(updated, ref)
	}

	if !changed {
		return nil
	}

	sa.ImagePullSecrets = updated

	_, err = kcl.cli.CoreV1().ServiceAccounts(namespace).Update(context.TODO(), sa, metav1.UpdateOptions{})
	return err
}

func (kcl *KubeClient) UpdateServiceAccountImagePullSecrets(namespace, name string, secretNames []string) error {
	sa, err := kcl.cli.CoreV1().ServiceAccounts(namespace).Get(context.TODO(), name, metav1.GetOptions{})
	if err != nil {
		return fmt.Errorf("failed to get service account %q: %w", name, err)
	}

	refs := make([]corev1.LocalObjectReference, 0, len(secretNames))
	for _, s := range secretNames {
		refs = append(refs, corev1.LocalObjectReference{Name: s})
	}
	sa.ImagePullSecrets = refs

	_, err = kcl.cli.CoreV1().ServiceAccounts(namespace).Update(context.TODO(), sa, metav1.UpdateOptions{})
	if err != nil {
		return fmt.Errorf("failed to update service account %q: %w", name, err)
	}
	return nil
}

func (kcl *KubeClient) ensureNamespaceAccessForServiceAccount(serviceAccountName, namespace string) error {
	roleBindingName := namespaceClusterRoleBindingName(namespace, kcl.instanceID)

View on GitHub (pinned to 17e74456ff)

When it happens

Trigger: Thrown at api/kubernetes/cli/service_account.go:365 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of portainer/portainer@17e74456ff (2026-08-26). Data as JSON: /api/errors/a6df9ed339e171c6. Report an issue: GitHub.