Can't create user

[moosilauke18]

I'm getting this error

Error from server (Forbidden): error when creating "monica-database-user.yaml": admission webhook "vdatabaseuser.kb.io" denied the request: spec.username: Duplicate value: "monica"

With this yaml file:

apiVersion: databases.digitalocean.com/v1alpha1
kind: DatabaseUser
metadata:
  name: monica-db-user
spec:
  databaseCluster:
    apiGroup: databases.digitalocean.com
    kind: DatabaseClusterReference
    name: my-db
  username: monica

Using version: 0.1.13

[moosilauke18]

Perhaps the weirder thing is I try to use a DatabaseUserReference it panics a lot. It's been a year since I created this cluster and I do wonder if perhaps it was created with do-operator in cloud control panel UI while creating the cluster. However, regardless DatabaseUser has never worked. And the weird thing is I eventually get errors on the controller pod saying things like

2025-08-22T19:14:40Z ERROR controller-runtime.cache.UnhandledError Failed to watch {"version": "v0.1.13", "reflector": "sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114", "type": "*v1alpha1.DatabaseClusterReference", "error": "failed to list *v1alpha1.DatabaseClusterReference: databaseclusterreferences.databases.digitalocean.com is forbidden: User "system:serviceaccount:do-operator-system:do-operator-controller-manager" cannot list resource "databaseclusterreferences" in API group "databases.digitalocean.com" at the cluster scope"}

Now, that is granted with the ClusterRole and ClusterRoleBinding, but somehow a second ServiceAccount is created in kube-system and the ClusterRoleBinding that was giving the permissions for the above now give it to a different ServiceAccount.

[moosilauke18]

Looking through the code, it seems obvious that the error with creating a user is because the field is duplicated here: https://github.com/digitalocean/do-operator/blob/main/api/webhooks/databaseuser_webhook.go#L113-L115

[moosilauke18]

And even with all the do-operator resources deleted kubectl delete -f releases/do-operator-v0.1.13.yaml something behind the scenes is recreating the ServiceAccount, but nothing else that I can see.