Patch Orchestration Application (POA) does not install updates in gMSA security cluster

Question

https://github.com/microsoft/Service-Fabric-POA/issues/34

In ETW log, i see next:
{

"ProviderName": "POA-NodeAgentSFUtility",
"Id": 2,
"Message": "RepairManagerHelper.CreateRepairTaskForNode failed. Exception details System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at System.Fabric.Interop.NativeClient.IFabricRepairManagementClient2.EndCreateRepairTask(IFabricAsyncOperationContext context)
at System.Fabric.Interop.AsyncCallOutAdapter21.Finish(IFabricAsyncOperationContext context, Boolean expectedCompletedSynchronously) --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.ServiceFabric.PatchOrchestration.NodeAgentSFUtility.Helpers.RepairManagerHelper.d__6.MoveNext() in D:\a\1\s\src\PatchOrchestrationApplication\NodeAgentSFUtility\src\Helpers\RepairManagerHelper.cs:line 170", "ProcessId": 9876, "Level": "Error", "Keywords": "0x0000F00000000000", "EventName": "ErrorMessage", "ActivityID": null, "RelatedActivityID": null, "Payload": { "message": "RepairManagerHelper.CreateRepairTaskForNode failed. Exception details System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) at System.Fabric.Interop.NativeClient.IFabricRepairManagementClient2.EndCreateRepairTask(IFabricAsyncOperationContext context) at System.Fabric.Interop.AsyncCallOutAdapter21.Finish(IFabricAsyncOperationContext context, Boolean expectedCompletedSynchronously)
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.ServiceFabric.PatchOrchestration.NodeAgentSFUtility.Helpers.RepairManagerHelper.d__6.MoveNext() in D:\a\1\s\src\PatchOrchestrationApplication\NodeAgentSFUtility\src\Helpers\RepairManagerHelper.cs:line 170"
}
}

I tried to run POA as Service Fabric Administrator, https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-run-service-as-ad-user-or-group, but it did not help.