This message was deleted.

I don't see where you're attaching the policy to the cluster itself.

Thank you for your response. I have managed to resolve this problem. It was a typo in the helm chart's value

serviceaccount

which should be

serviceAccount

and the namespace in the iam role and service account were different.

Ouch. That sounds like no fun.

Indeed. it was a nightmare