Goal

Today, any namespace admin can create and trigger migrations.
In order to avoid abuse, let's limit the triggering of migrations to cluster-admins.

Before the change namespace admins (system:admin) can trigger migrations.
After the change namespace admins can not trigger migrations.

The reasoning is that moving VMs on the infra level, without impact to the user, is an infra admin - clsuter-admin - only task.

User Stories

• "As a cluster admin, I want to be the only human to trigger VM live migrations, so that nobody can abuse this mechanism.
• another user story

Non-Requirements

• List of things not included in this epic, to alleviate any doubt raised during the grooming process.

Notes

• Any additional details or decisions made/needed