set up the environment to verify the issue - https://issues.redhat.com/browse/SREP-2070, it's about ACM latest-2.15 deploy on the ROSA-CLASSIC failed with OCP 4.19.13.
The issue persists,
The PR is merged 5 days ago, and the ACM latest-2.15, 2.15.0-DOWNSTREAM-2025-10-11-01-13-51 It was built 2 days ago.
You can log in this cluster to check the details.
The same error in the mch operator pod.
2025-10-13T07:15:44.128Z ERROR reconcile Failed to update namespace for MultiClusterHub: ocm with the label: openshift.io/cluster-monitoring {"error": "admission webhook \"namespace-validation.managed.openshift.io\" denied the request: Denied. Err Managed OpenShift customers may only remove the following protected labels from Namespaces: ([openshift.io/cluster-monitoring])"} github.com/stolostron/multiclusterhub-operator/controllers.(*MultiClusterHubReconciler).ensureOpenShiftNamespaceLabel /workspace/controllers/infrastructure.go:63 github.com/stolostron/multiclusterhub-operator/controllers.(*MultiClusterHubReconciler).Reconcile /workspace/controllers/reconcile.go:231 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile /cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.18.5/pkg/internal/controller/controller.go:114 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler /cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.18.5/pkg/internal/controller/controller.go:311 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem /cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.18.5/pkg/internal/controller/controller.go:261 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2 /cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.18.5/pkg/internal/controller/controller.go:222