While fixing CVE-2021-3948 we limit the migration-controller to only watch openshift-migration namespace. While this will improve security it does limit configuration to openshift-migration namespace only which may not expected by certain customers. Hence having the possibility to specify additional namespaces to watch by the migration-controller would be helpful.

So the requirement would be to have a way to configure a list of namespaces the migration-controller should watch aside the default namespace which is openshift-migration.