Great, so that then looks like it fixed the issue you are reporting originally.
So since this is involving OVN and Octavia I'm inclined it might be related to bug 1917475, that issue and several other RBAC-related issues will be fixed by the point release update tracked in bug 1924981.
The first bug includes a reference to a PPA with fixed OVN packages, would you be able to try adding that PPA to the deployment and see if it helps with the issue? You would have to add it to the ovn-central units and possibly ovn-chassis units.
Great, so that then looks like it fixed the issue you are reporting originally.
So since this is involving OVN and Octavia I'm inclined it might be related to bug 1917475, that issue and several other RBAC-related issues will be fixed by the point release update tracked in bug 1924981.
The first bug includes a reference to a PPA with fixed OVN packages, would you be able to try adding that PPA to the deployment and see if it helps with the issue? You would have to add it to the ovn-central units and possibly ovn-chassis units.