-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
Quality / Stability / Reliability
-
Moderate
-
None
Description of problem:
While testing Cross cluster live migration through the Fleet Virtualization menus, I noticed the mtv-integrations-controller is consistently erroring on failed to watch deployment. However note, CCLM are workin as expected so it does not appear to be a blocking issue
Version-Release number of selected component (if applicable):
All 3 clusters:
OCP: 4.21.0-rc.2
kubevirt-hyperconverged-operator.4.21.0-156
ACM hub:
multicluster-engine.v2.11.0-202
advanced-cluster-management.v2.16.0-173
mtv-operator.v2.11.0 (forklift-fbc-prod-v421:on-pr-b4e3e0a475ec476ae817941e84d1673bea898c73)
How reproducible:
Error is happening very often in the pod log
Additional info:
Full error:
2026-01-26T14:57:20Z ERROR controller-runtime.cache.UnhandledError Failed to watch {"reflector": "pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:289", "type": "*v1.Deployment", "error": "deployments.apps is forbidden: User \"system:serviceaccount:open-cluster-management:mtv-integrations-manager\" cannot watch resource \"deployments\" in API group \"apps\" at the cluster scope"}
k8s.io/apimachinery/pkg/util/runtime.logError
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/runtime/runtime.go:221
k8s.io/apimachinery/pkg/util/runtime.handleError
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/runtime/runtime.go:212
k8s.io/apimachinery/pkg/util/runtime.HandleErrorWithContext
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/runtime/runtime.go:198
k8s.io/client-go/tools/cache.DefaultWatchErrorHandler
/cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:204
k8s.io/client-go/tools/cache.(*Reflector).RunWithContext.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:370
k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:233
k8s.io/apimachinery/pkg/util/wait.BackoffUntilWithContext.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:255
k8s.io/apimachinery/pkg/util/wait.BackoffUntilWithContext
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:256
k8s.io/apimachinery/pkg/util/wait.BackoffUntil
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:233
k8s.io/client-go/tools/cache.(*Reflector).RunWithContext
/cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:368
k8s.io/client-go/tools/cache.(*controller).RunWithContext.(*Group).StartWithContext.func3
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/wait.go:63
k8s.io/apimachinery/pkg/util/wait.(*Group).Start.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/wait.go:72
2026-01-26T14:58:17Z ERROR controller-runtime.cache.UnhandledError Failed to watch {"reflector": "pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:289", "type": "*v1.Deployment", "error": "deployments.apps is forbidden: User \"system:serviceaccount:open-cluster-management:mtv-integrations-manager\" cannot watch resource \"deployments\" in API group \"apps\" at the cluster scope"}
k8s.io/apimachinery/pkg/util/runtime.logError
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/runtime/runtime.go:221
k8s.io/apimachinery/pkg/util/runtime.handleError
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/runtime/runtime.go:212
k8s.io/apimachinery/pkg/util/runtime.HandleErrorWithContext
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/runtime/runtime.go:198
k8s.io/client-go/tools/cache.DefaultWatchErrorHandler
/cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:204
k8s.io/client-go/tools/cache.(*Reflector).RunWithContext.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:370
k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:233
k8s.io/apimachinery/pkg/util/wait.BackoffUntilWithContext.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:255
k8s.io/apimachinery/pkg/util/wait.BackoffUntilWithContext
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:256
k8s.io/apimachinery/pkg/util/wait.BackoffUntil
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/backoff.go:233
k8s.io/client-go/tools/cache.(*Reflector).RunWithContext
/cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:368
k8s.io/client-go/tools/cache.(*controller).RunWithContext.(*Group).StartWithContext.func3
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/wait.go:63
k8s.io/apimachinery/pkg/util/wait.(*Group).Start.func1
/cachi2/output/deps/gomod/pkg/mod/k8s.io/apimachinery@v0.35.0/pkg/util/wait/wait.go:72
