Migrate from controlPlaneManagement to management

The controlPlaneManagement setting for managing your service mesh control plane is deprecated. If you were previously using controlPlaneManagement, you must migrate to the management setting.

To check if you're using controlPlaneManagement, use the Feature State API:

  gcloud container fleet mesh describe

Any value for controlPlane under your membership spec indicates that you're using controlPlaneManagement and need to migrate to management.

Differences between the controlPlaneManagement and management settings

The management setting enables additional automatic behaviors, compared to the controlPlaneManagement setting:

• management automatically enables managed data plane.
• management automatically enables multi-cluster endpoint discovery.

Migration steps:

There are two possible scenarios depending on your setup. We'll outline the migration steps for each scenario.

controlPlaneManagement is enabled and management is unset

Condition DEPRECATED_SPEC_CONTROL_PLANE_MANAGEMENT will be displayed through Feature State API. To migrate to management:

1. Enable automatic management for the cluster, optionally disabling some capabilities. Run:

     gcloud container fleet mesh update \
       --management automatic \
       --memberships MEMBERSHIP_NAME \
       --project FLEET_PROJECT_ID \
       --location MEMBERSHIP_LOCATION
   

2. Ensure you have the chosen configuration for multi-cluster endpoint discovery.

   • If you have multiple clusters, ensure you enable prerequisites for endpoint discovery, including ensuring firewall rules.
   • Alternately, follow the Disable instructions at configure endpoint discovery.

3. Note that you have enabled the managed data plane.

   • Alternately, disable data plane management.

4. Disable the no-longer-used controlPlaneManagement setting:

       gcloud container fleet mesh update \
         --control-plane unspecified \
         --memberships MEMBERSHIP_NAME \
         --project FLEET_PROJECT_ID \
         --location MEMBERSHIP_LOCATION
   

Both the management and controlPlaneManagement settings are enabled

If you're already using the management setting, you might see the DEPRECATED_SPEC_CONTROL_PLANE_MANAGEMENT_SAFE condition displayed through the Feature State API. This indicates that the deprecated controlPlaneManagement setting is still present in your configuration even though it's no longer being used.

To remove this deprecated setting and ensure a clean configuration, run:

    gcloud container fleet mesh update \
      --control-plane unspecified \
      --memberships MEMBERSHIP_NAME \
      --project FLEET_PROJECT_ID \
      --location MEMBERSHIP_LOCATION

This will have no effect on your mesh's behavior, since the management setting already overrides the controlPlaneManagement setting.