it's not possible to remove scheduling gates from privileged pods unless an SCC allows it. One of the main goals of scheduling gates is to support custom quotas, but right now in OpenShift, this isn't possible unless an SCC is configured to allow the gate to be removed.

OpenShift Virtualization uses a custom quota that depends on removing the scheduling gate from pods, so we had to create an SCC to support this. However, the recommended best practice is to avoid using privileged SCCs, as mentioned here:
https://github.com/redhat-best-practices-for-k8s/certsuite/blob/main/CATALOG.md#operator-install-status-no-privileges

this bug is blocking:
https://issues.redhat.com/browse/CNV-58655