Thanks for the context Wei Li. Do we still need the openshift web console to know about mobileclients now? I'm just thinking that this may impact AEROGEAR-9691.

Actually, thinking about it more, fixing that issue would probably make this one go away in a cleaner way: if we change the group from mobile.k8s.io to mdc.aerogear.org, then this error won't appear in the web console (we don't see it when the mobileclient.mobile.k8s.io CRD is not added to the cluster). This would mean that we wouldn't have to hack around it by adding strange cluster permissions to all users.