---

NAME                          CREATED AT
openmetadata-omjob-operator   2026-04-21T11:47:56Z
➜  openmetadata git:(feature/BDOPS-904) kubectl get clusterrolebinding openmetadata-omjob-operator
NAME                          ROLE                                      AGE
openmetadata-omjob-operator   ClusterRole/openmetadata-omjob-operator   169d
➜  openmetadata git:(feature/BDOPS-904) k auth can-i omjobs.pipelines.openmetadata.org --as=system:serviceaccount:bdo-tst-openmetadata-omjob-operator --all-namespaces
error: you must specify two arguments: verb resource or verb resource/resourceName.
See 'kubectl auth can-i -h' for help and examples.
➜  openmetadata git:(feature/BDOPS-904) k auth can-i list omjobs.pipelines.openmetadata.org --as=system:serviceaccount:bdo-tst-openmetadata-omjob-operator --all-namespaces
E1008 12:00:35.036859  309587 memcache.go:381] "Couldn't get current server API group list" err="not allowed to impersonate service account"
E1008 12:00:35.126765  309587 memcache.go:381] "Couldn't get current server API group list" err="not allowed to impersonate service account"
E1008 12:00:35.202886  309587 memcache.go:381] "Couldn't get current server API group list" err="not allowed to impersonate service account"
Warning: the server doesn't have a resource type 'omjobs' in group 'pipelines.openmetadata.org'

Error from server (Forbidden): not allowed to impersonate service account (post selfsubjectaccessreviews.authorization.k8s.io)