+++ This bug was initially created as a clone of Bug #2056375 +++ +++ This bug was initially created as a clone of Bug #2056374 +++ Description of problem: Attempt to start ocp image precaching with direct image url. Image precachine does not start with cannot list resource "clusterserviceversions" Version-Release number of selected component (if applicable): 4.10 How reproducible: 100% Steps to Reproduce: 1. Deploy the CGU operator and configure precaching 2. 3. Actual results: 2022-02-18T09:05:55.925Z ERROR controllers.ClusterGroupUpgrade reconcilePrecaching error {"error": "clusterserviceversions.operators.coreos.com is forbidden: User \"system:serviceaccount:openshift-cluster-group-upgrades:cluster-group-upgrades-controller-manager\" cannot list resource \"clusterserviceversions\" in API group \"operators.coreos.com\" at the cluster scope"} Expected results: Precaching starts Additional info:
Verified with 4.10 TALO.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:0056
*** Bug 2056374 has been marked as a duplicate of this bug. ***