+++ This bug was initially created as a clone of Bug #2015583 +++ Description of problem: `rolebindings.authorization.openshift.io` is a mirror resource of `rolebindings.rbac.authorization.k8s.io`. OCP 4 creates the mirror resource everytime the upstream rolebinding resource is created. Therefore there is no reason why it should be migrated. Infact on some environments where there are large number of roleebindings, excluding it will increase the speed of migration depending. Version-Release number of selected component (if applicable): all How reproducible: Always Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Verified with MTC 1.6.2 image: registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:3250701a11a8ab8919178f4a55d95d6fce62618256b6283fb2dd4913564889dd rolebindings.authorization.openshift.io resource is excluded from migration $ oc get pods -n openshift-migration migration-controller-55676768f8-42trn -o yaml env: - name: EXCLUDED_RESOURCES value: imagetags,templateinstances,clusterserviceversions,packagemanifests,subscriptions,servicebrokers,servicebindings,serviceclasses,serviceinstances,serviceplans,operatorgroups,events,events.events.k8s.io,rolebindings.authorization.openshift.io
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Migration Toolkit for Containers (MTC) 1.6.2 release advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:4608