Resource group update
Secure Gateway is deprecated. For more information, see the deprecation details.
Overview
Secure Gateway users need to make a change to how their Secure Gateway instances are connected to IBM Cloud.
What's changing?
Secure Gateway is moving to IBM Cloud resource groups as a replacement for the deprecated Cloud Foundry organizations. As a result, any Secure Gateway instances that are not in an IBM Cloud resource group need to be added to one before the following deadline.
- There are no changes to the Secure Gateway instance, it's operation, or function.
- There are no changes to the deployment region.
- There will be a very short disruption similar to a normal Secure Gateway maintenance event. More details below.
Timeline
| Date | Stage | Description |
|---|---|---|
| 27 October 2023 | Announcement | Secure Gateway is announcing a change in the way it deploys and references instances of the service. This update will move away from Cloud Foundry organizations, and move to IBM Cloud Resource Groups |
| 27 November 2023 | Deadline | This is the deadline for the update of the Secure Gateway instances into Resource Groups. If the user does not take action and perform the steps themselves, all of the automated steps listed below will be taken at that time based on each instance status. |
| 30 November 2023 | Updates completed | All updates will have been completed for Secure Gateway instance resource group updates - either the user will have made the change themselves or the Secure Gateway Product team will have made the change for them. |
What do I need to do?
There are two methods below for this change to be made - one done by yourself and one done by the Secure Gateway product team.
Review the following sections for more information about your options and impact.
Manually selecting a resource group for your Secure Gateway instances
Impact: When you execute the update of your Secure Gateway instance, there will be a very short disruption similar to a normal Secure Gateway maintenance event.
Doing this change yourself allows you to control the name of the Resource Group into which you will place the Secure Gateway instance.
It also allows you to fully control security admin permissions to existing Secure Gateway instance(s).
If you do not make the changes by the stated deadline, the Secure Gateway product team will do the below step.
Allowing the Secure Gateway product team to apply the changes
If you do not do the above step, the Secure Gateway product team will make this update. However this can only be done if you have a single Secure Gateway instance in the same region. If you have more than one Secure Gateway instance in the same region, we are unable to make the update for you, and the previous step is required.
Impact: When the Secure Gateway product team updates this for you, there will be a very short disruption similar to a normal Secure Gateway maintenance event, but you will not have control over that disruption time frame. A maintenance notification will be posted prior to the ocurrance of the below steps.
The product team will complete the following:
-
Move your Secure Gateway instance into the resource group named 'Default' in your account
-
Only the account owner will retain admin privilages for the Secure Gateway instance, all other users that previously had admin privilages for that Secure Gateway instance will be removed
-
The Secure Gateway instance account owner will then need to optionally add admin privlages back for other IBM Cloud users
-
As a final step, if a Secure Gateway instance has Gateways with no usage traffic in August, September, or October of 2023 - 3 months of no usage - we will put that Gateway into the disabled state. That will denote for us that the Gateway has no traffic or usage. Users can enable it again as they like and continue usage - easy instructions to do that are in Managing the Secure Gateway service
Update Steps
When you are ready to make the udpate changes to your Secure Gateway instance, see the instructions Updating Secure Gateway service instances to resource group
Summary
Whether you manually update the resource group for their Secure Gateway, or allow the IBM Cloud Secure Gateway product team do it for you, there is no difference in operation or function for your Secure Gateway instances, no changes, and no downtime required.
Customer Support
These materials and resources should help you through your IBM Cloud Secure Gateway update to resource groups. If you have questions, or need help, contact IBM Cloud® Customer Support for additional information and assistance.