Controller has error `cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\"`

This is from a 0.14.0 install

> {"level":"error","ts":"2025-01-24T01:28:15Z","msg":"Reconciler error","controller":"collector-config","controllerGroup":"monitoring.googleapis.com","controllerKind":"OperatorConfig","OperatorConfig":{"name":"config","namespace":"gmp-public"},"namespace":"gmp-public","name":"config","reconcileID":"e1f9ab14-ab0c-4e6c-ba3a-0de29c79145b","error":"ensure collector config: podmonitorings.monitoring.googleapis.com \"direct-gateway\" is forbidden: User \"system:serviceaccount:gmp-system:operator\" cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\" in the namespace \"default\"\npodmonitorings.monitoring.googleapis.com \"gateway\" is forbidden: User \"system:serviceaccount:gmp-system:operator\" cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\" in the namespace \"default\"\npodmonitorings.monitoring.googleapis.com \"envoy-lb-eds\" is forbidden: User \"system:serviceaccount:gmp-system:operator\" cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\" in the namespace \"kube-system\"\npodmonitorings.monitoring.googleapis.com \"ratelimit-manager\" is forbidden: User \"system:serviceaccount:gmp-system:operator\" cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\" in the namespace \"kube-system\"\npodmonitorings.monitoring.googleapis.com \"xxx\" is forbidden: User \"system:serviceaccount:gmp-system:operator\" cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\" in the namespace \"xxx\"\npodmonitorings.monitoring.googleapis.com \"audio\" is forbidden: User \"system:serviceaccount:gmp-system:operator\" cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\" in the namespace \"default\"\npodmonitorings.monitoring.googleapis.com \"privatelink-gateway\" is forbidden: User \"system:serviceaccount:gmp-system:operator\" cannot update resource \"podmonitorings\" in API group \"monitoring.googleapis.com\" in the namespace \"default\"","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:329\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227"}