https://github.com/kubevirt/hyperconverged-cluster-operator/pull/3284/ added the "openshift.io/required-scc: restricted-v2" annotation already to the ssp-operator pod itself. The ssp-operator should add the annotation to the pods it is deploying, like virt-template-validator and vm-console-proxy.