Bug 2056375

Summary: reconcilePrecaching error: cannot list resource "clusterserviceversions" in API group "operators.coreos.com" at the cluster scope"
Product: OpenShift Container Platform Reporter: Vitaly Grinberg <vgrinber>
Component: Telco EdgeAssignee: Vitaly Grinberg <vgrinber>
Telco Edge sub component: RAN QA Contact: yliu1
Status: CLOSED ERRATA Docs Contact:
Severity: urgent    
Priority: unspecified CC: keyoung, yliu1
Version: 4.10   
Target Milestone: ---   
Target Release: 4.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: 2056374 Environment:
Last Closed: 2022-08-26 16:43:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2056374, 2056572    

Description Vitaly Grinberg 2022-02-21 05:45:12 UTC 
+++ This bug was initially created as a clone of Bug #2056374 +++

Description of problem:
Attempt to start ocp image precaching with direct image url. Image precachine does not start with  cannot list resource "clusterserviceversions"

Version-Release number of selected component (if applicable):
4.10

How reproducible:

100%

Steps to Reproduce:
1. Deploy the CGU operator and configure precaching
2.
3.

Actual results:
2022-02-18T09:05:55.925Z	ERROR	controllers.ClusterGroupUpgrade	reconcilePrecaching error	{"error": "clusterserviceversions.operators.coreos.com is forbidden: User \"system:serviceaccount:openshift-cluster-group-upgrades:cluster-group-upgrades-controller-manager\" cannot list resource \"clusterserviceversions\" in API group \"operators.coreos.com\" at the cluster scope"}


Expected results:
Precaching starts 

Additional info:
Comment 2 yliu1 2022-02-25 19:25:33 UTC 
Verified on TALO master branch. Precache started using direct image url in CV policy.

    precaching:
      clusters:
      - helix21-0
      spec:
        platformImage: registry.ci.openshift.org/ocp/release@sha256:fd96300600f9585e5847f5855ca14e2b3cafbce12aefe3b3f52c5da10c4476eb
      status:
        helix21-0: PreparingToStart
    status: {}