--- apiVersion: config.openshift.io/v1 kind: ClusterOperator metadata: annotations: capability.openshift.io/name: Insights exclude.release.openshift.io/internal-openshift-hosted: "true" include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" creationTimestamp: "2026-10-23T02:31:38Z" generation: 1 managedFields: - apiVersion: config.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:capability.openshift.io/name: {} f:exclude.release.openshift.io/internal-openshift-hosted: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:ownerReferences: .: {} k:{"uid":"6df24ef5-2ea0-432c-941f-90286d5cf459"}: {} f:spec: {} manager: cluster-version-operator operation: Update time: "2026-10-23T02:31:38Z" - apiVersion: config.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: .: {} f:extension: {} manager: cluster-version-operator operation: Update subresource: status time: "2026-10-23T02:31:38Z" - apiVersion: config.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Available"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"ClusterTransferAvailable"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Degraded"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Disabled"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"GatheringDisabled"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Progressing"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"RemoteConfigurationAvailable"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"RemoteConfigurationValid"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"SCAAvailable"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} f:extension: f:lastReportTime: {} f:relatedObjects: {} f:versions: {} manager: insights-operator operation: Update subresource: status time: "2026-10-23T02:42:04Z" name: insights ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: 6df24ef5-2ea0-432c-941f-90286d5cf459 resourceVersion: "9620" uid: eb2e5868-8eca-4590-8b69-6620717218e4 spec: {} status: conditions: - lastTransitionTime: "2026-10-23T02:38:58Z" message: Insights works as expected reason: AsExpected status: "True" type: Available - lastTransitionTime: "2026-10-23T02:42:04Z" message: no available cluster transfer reason: NoClusterTransfer status: "False" type: ClusterTransferAvailable - lastTransitionTime: "2026-10-23T02:38:58Z" message: Insights works as expected reason: AsExpected status: "False" type: Degraded - lastTransitionTime: "2026-10-23T02:38:58Z" reason: AsExpected status: "False" type: Disabled - lastTransitionTime: "2026-10-23T02:38:58Z" message: Gathering is enabled reason: AsExpected status: "False" type: GatheringDisabled - lastTransitionTime: "2026-10-23T02:38:58Z" message: Monitoring the cluster reason: AsExpected status: "False" type: Progressing - lastTransitionTime: "2026-10-23T02:40:30Z" reason: Succeeded status: "True" type: RemoteConfigurationAvailable - lastTransitionTime: "2026-10-23T02:40:30Z" reason: Succeeded status: "True" type: RemoteConfigurationValid - lastTransitionTime: "2026-10-23T02:42:04Z" message: 'Failed to pull SCA certs from https://api.openshift.com/api/accounts_mgmt/v1/entitlement_certificates: OCM API https://api.openshift.com/api/accounts_mgmt/v1/entitlement_certificates returned HTTP 403: {"code":"ACCT-MGMT-11","href":"/api/accounts_mgmt/v1/errors/11","id":"11","kind":"Error","operation_id":"691e0c06-f2f3-4033-ac93-352bdf0be074","reason":"Account with ID 2DUeKzzTD9ngfsQ6YgkzdJn1jA4 denied access to perform create on EntitlementCertificate with HTTP call POST /api/accounts_mgmt/v1/entitlement_certificates"}' reason: Forbidden status: "False" type: SCAAvailable extension: lastReportTime: null relatedObjects: - group: "" name: openshift-insights resource: namespaces - group: apps name: insights-operator namespace: openshift-insights resource: deployments - group: "" name: pull-secret namespace: openshift-config resource: secrets - group: "" name: support namespace: openshift-config resource: secrets - group: "" name: gather namespace: openshift-insights resource: serviceaccounts - group: "" name: operator namespace: openshift-insights resource: serviceaccounts - group: "" name: metrics namespace: openshift-insights resource: services - group: "" name: service-ca-bundle namespace: openshift-insights resource: configmaps - group: operator.openshift.io name: cluster resource: insightsoperators - group: rbac.authorization.k8s.io name: insights-operator resource: clusterroles - group: rbac.authorization.k8s.io name: insights-operator-gather resource: clusterroles - group: rbac.authorization.k8s.io name: insights-runtime-extractor-role resource: clusterroles versions: - name: operator version: 4.22.18