Christopher Stephens [X] (Inactive) added a comment - 24/Mar/21 7:55 PM   should be good to go. let me know if you have any questions. [lsstdb1] # \du svcpl* List of roles Role name | Attributes | Member of ------------------+------------+------------------------- svcplotnavigator | | {rc2_owner,gen3_r_role} [lsstdb1] # \dn svcpl* List of schemas Name | Owner ------------------+------------------ svcplotnavigator | svcplotnavigator (1 row)  

Andrew Manning [X] (Inactive) added a comment - 30/Mar/21 1:19 PM Christopher Stephens [X] , we are seeing timeout errors when trying to connect using the new account. We are trying with the commands below (entering no password in either case since the service account was requested with no password). root@debugger-0:/# psql --username=svcplotnavigator --dbname=lsstdb1 --host=lsst-pg-prod1.ncsa.illinois.edu --port=5432   root@debugger-0:/# psql --username=svcplotnavigator --dbname=lsstdb1 --host=lsst-pg-prod1.ncsa.illinois.edu --port=5432 --password Password: The service account request included the restriction that the origin IP must be 141.142.218.242, the address of our Kubernetes cluster node (hence the lack of need for a password since the account is only read-only too). Any idea what may be preventing the account from working?