diff --git a/pkg/cluster/sync.go b/pkg/cluster/sync.go
index 5aa42399b..56794cf73 100644
--- a/pkg/cluster/sync.go
+++ b/pkg/cluster/sync.go
@@ -11,32 +11,45 @@ import (
 
 // Sync syncs the cluster, making sure the actual Kubernetes objects correspond to what is defined in the manifest.
 // Unlike the update, sync does not error out if some objects do not exist and takes care of creating them.
-func (c *Cluster) Sync() error {
+func (c *Cluster) Sync(newSpec *spec.Postgresql) (err error) {
 	c.mu.Lock()
 	defer c.mu.Unlock()
 
-	err := c.loadResources()
+	c.Postgresql = *newSpec
+
+	err = c.loadResources()
 	if err != nil {
 		c.logger.Errorf("could not load resources: %v", err)
 	}
 
+	defer func() {
+		if err != nil {
+			c.setStatus(spec.ClusterStatusSyncFailed)
+		} else if c.Status != spec.ClusterStatusRunning {
+			c.setStatus(spec.ClusterStatusRunning)
+		}
+	}()
+
 	if err = c.initUsers(); err != nil {
-		return err
+		err = fmt.Errorf("could not init users: %v", err)
+		return
 	}
 
 	c.logger.Debugf("syncing secrets")
 
 	//TODO: mind the secrets of the deleted/new users
-	if err := c.applySecrets(); err != nil {
+	if err = c.applySecrets(); err != nil {
 		if !k8sutil.ResourceAlreadyExists(err) {
-			return fmt.Errorf("could not sync secrets: %v", err)
+			err = fmt.Errorf("could not sync secrets: %v", err)
+			return
 		}
 	}
 
 	c.logger.Debugf("syncing endpoints")
-	if err := c.syncEndpoint(); err != nil {
+	if err = c.syncEndpoint(); err != nil {
 		if !k8sutil.ResourceAlreadyExists(err) {
-			return fmt.Errorf("could not sync endpoints: %v", err)
+			err = fmt.Errorf("could not sync endpoints: %v", err)
+			return
 		}
 	}
 
@@ -45,39 +58,44 @@ func (c *Cluster) Sync() error {
 		if role == Replica && !c.Spec.ReplicaLoadBalancer {
 			if c.Services[role] != nil {
 				// delete the left over replica service
-				if err := c.deleteService(role); err != nil {
-					return fmt.Errorf("could not delete obsolete %s service: %v", role, err)
+				if err = c.deleteService(role); err != nil {
+					err = fmt.Errorf("could not delete obsolete %s service: %v", role, err)
+					return
 				}
 			}
 			continue
 		}
-		if err := c.syncService(role); err != nil {
+		if err = c.syncService(role); err != nil {
 			if !k8sutil.ResourceAlreadyExists(err) {
-				return fmt.Errorf("coud not sync %s service: %v", role, err)
+				err = fmt.Errorf("coud not sync %s service: %v", role, err)
+				return
 			}
 		}
 	}
 
 	c.logger.Debugf("syncing statefulsets")
-	if err := c.syncStatefulSet(); err != nil {
+	if err = c.syncStatefulSet(); err != nil {
 		if !k8sutil.ResourceAlreadyExists(err) {
-			return fmt.Errorf("could not sync statefulsets: %v", err)
+			err = fmt.Errorf("could not sync statefulsets: %v", err)
+			return
 		}
 	}
 
 	if !c.databaseAccessDisabled() {
 		c.logger.Debugf("syncing roles")
-		if err := c.syncRoles(true); err != nil {
-			return fmt.Errorf("could not sync roles: %v", err)
+		if err = c.syncRoles(true); err != nil {
+			err = fmt.Errorf("could not sync roles: %v", err)
+			return
 		}
 	}
 
 	c.logger.Debugf("syncing persistent volumes")
-	if err := c.syncVolumes(); err != nil {
-		return fmt.Errorf("could not sync persistent volumes: %v", err)
+	if err = c.syncVolumes(); err != nil {
+		err = fmt.Errorf("could not sync persistent volumes: %v", err)
+		return
 	}
 
-	return nil
+	return
 }
 
 func (c *Cluster) syncService(role PostgresRole) error {
diff --git a/pkg/controller/postgresql.go b/pkg/controller/postgresql.go
index fcce69b18..539b50e20 100644
--- a/pkg/controller/postgresql.go
+++ b/pkg/controller/postgresql.go
@@ -57,7 +57,6 @@ func (c *Controller) clusterListFunc(options metav1.ListOptions) (runtime.Object
 	err = json.Unmarshal(b, &list)
 
 	if time.Now().Unix()-atomic.LoadInt64(&c.lastClusterSyncTime) <= int64(c.opConfig.ResyncPeriod.Seconds()) {
-		c.logger.Debugln("skipping resync of clusters")
 		return &list, err
 	}
 
@@ -249,7 +248,7 @@ func (c *Controller) processEvent(event spec.ClusterEvent) {
 		}
 
 		c.curWorkerCluster.Store(event.WorkerID, cl)
-		if err := cl.Sync(); err != nil {
+		if err := cl.Sync(event.NewSpec); err != nil {
 			cl.Error = fmt.Errorf("could not sync cluster: %v", err)
 			lg.Error(cl.Error)
 			return
diff --git a/pkg/spec/postgresql.go b/pkg/spec/postgresql.go
index e1dcf5740..1965e6479 100644
--- a/pkg/spec/postgresql.go
+++ b/pkg/spec/postgresql.go
@@ -68,6 +68,7 @@ const (
 	ClusterStatusCreating     PostgresStatus = "Creating"
 	ClusterStatusUpdating     PostgresStatus = "Updating"
 	ClusterStatusUpdateFailed PostgresStatus = "UpdateFailed"
+	ClusterStatusSyncFailed   PostgresStatus = "SyncFailed"
 	ClusterStatusAddFailed    PostgresStatus = "CreateFailed"
 	ClusterStatusRunning      PostgresStatus = "Running"
 	ClusterStatusInvalid      PostgresStatus = "Invalid"