ISSUE:
Cluster install is failing with the below error
~~~
time="2025-09-25T01:05:53Z" level=error msg="failed to fetch Cluster: failed to generate asset \"Cluster\": failed to create cluster: failed during pre-provisioning: unable to initialize folders and templates: failed to import ova: failed to attach tag: unable to attach tag: POST https://redacted.com/rest/com/vmware/cis/tagging/tag-association/id:urn:vmomi:InventoryServiceTag:29099800-2c2b-4fd4-8003-3d5559632930:GLOBAL?~action=attach: 401 Unauthorized"
~~~

OBSERVATIONS:
We have verified all permissions are correct for the user installing the cluster
Logged into vSphere as the user installing the cluster and was able to manually tag

test tag using the below POST fails with a 401
~~~
https://redacted.com/rest/com/vmware/cis/tagging/tag-association/id:urn:vmomi:InventoryServiceTag:29099800-2c2b-4fd4-8003-3d5559632930:GLOBAL?~action=attach
~~~

Test tag with the below returns a 404, only diff is the ~ before action is removed
~~~
https://redacted.com/rest/com/vmware/cis/tagging/tag-association/id:urn:vmomi:InventoryServiceTag:29099800-2c2b-4fd4-8003-3d5559632930:GLOBAL?action=attach
~~~

The OVA import takes about ~1 hour due to the remote location of the site.
~~~
time="2025-09-24T23:45:15Z" level=info msg="Importing OVA ocp-edge-ech01-qzd7g-rhcos-default_region-default_zone into failure domain default_domain."
time="2025-09-24T23:45:20Z" level=debug msg="using ESXi redacted.com to import the OVA image"
time="2025-09-25T01:05:53Z" level=error msg="failed to fetch Cluster: failed to generate asset \"Cluster\": failed to create cluster: failed during pre-provisioning: unable to initialize folders and templates: failed to import ova: failed to attach tag: unable to attach tag: POST https://redacted.com/rest/com/vmware/cis/tagging/tag-association/id:urn:vmomi:InventoryServiceTag:29099800-2c2b-4fd4-8003-3d5559632930:GLOBAL?~action=attach: 401 Unauthorized"
~~~

It the template key is added to the install-config.yaml the install progressed.
~~~
template: /SAPL/redacted/vm/OpenShift/redacted/redacted
~~~