Merge pull request #28993 from apinnick/bz1921559-mtc-ocp3-upgrade-set-scc

Update migration-controller SCC on OCP3.10/earlier (1.4.0)

Author: apinnick

modules/migration-upgrading-migration-tool-3.adoc

@@ -35,14 +35,14 @@ $ sudo podman cp $(sudo podman create registry.redhat.io/rhmtc/openshift-migrati
 $ oc replace --force -f operator.yml
 ----
 
-. If you are upgrading from version 1.1.2 or earlier, delete the `Restic` pods to apply the changes:
+. If you are upgrading {mtc-short} 1.1.2 or earlier versions, delete the `Restic` pods to apply the changes:
 +
 [source,terminal]
 ----
 $ oc delete pod <restic_pod>
 ----
 
-. If you are upgrading from version 1.2 or later, scale the `migration-operator` deployment to `0` to stop the deployment:
+. If you are upgrading {mtc-short} 1.2 or later versions, scale the `migration-operator` deployment to `0` to stop the deployment:
 +
 [source,terminal]
 ----
@@ -70,13 +70,20 @@ $ oc -o yaml -n openshift-migration get deployment/migration-operator | grep ima
 $ sudo podman cp $(sudo podman create registry.redhat.io/rhmtc/openshift-migration-rhel7-operator:v{mtc-version-z}):/controller-3.yml ./
 ----
 
-. Create the `MigrationController` object:
+. Create the `migration-controller` object:
 +
 [source,terminal]
 ----
 $ oc create -f controller-3.yml
 ----
 
+. If your {product-title} version is 3.10 or earlier, set the security context constraint of the `migration-controller` service account to `anyuid` to enable direct image migration and direct volume migration:
++
+[source,terminal]
+----
+$ oc adm policy add-scc-to-user anyuid -z migration-controller -n openshift-migration
+----
+
 . Verify that the {mtc-short} pods are running:
 +
 [source,terminal]