The solution was to fix the name mismatch between the helm chart and the actual service account name as described in this thread: Backup task used wrong sa ?!
This should be fixed in the helm chart. I don’t remember changing the key serviceAccountName in the helm chart.