Unable to upgrade to TAS 2.11+ with Dynamic Egress enabled

Products

• VMware Tanzu Application Service for VMs

Issue/Introduction

When attempting to upgrade to TAS 2.11, the following error message is shown:

{"errors":["Could not apply migrations. '202008312231_remove_dynamic_egress.js' has javascript errors 'attempt to upgrade to TAS 2.11+ with Dynamic Egress enabled, please disable Dynamic Egress to upgrade. You can do this by setting `.properties.experimental_dynamic_egress_enforcement` to `false` using the OM CLI.'. Please contact your VMware representative."]}

Environment

Product Version: 2.11

Resolution

The Dynamic Egress Policies feature was deprecated and finally removed in 2.11. VMware recommends using App Security Groups (ASGs) to manage communication between your app and external services. You cannot upgrade to TAS for VMs v2.11 if you are using Dynamic Egress policies. Please check https://docs.pivotal.io/application-service/2-11/overview/release-notes/runtime-rn.html#dynamic-egress to list and delete possible Dynamic Egress policies before your upgrade.

Once it has been confirmed that no active Dynamic Egress policy is in use, you can follow steps below to disable this feature with the om cli (https://github.com/pivotal-cf/om):

1. Retrieve the staged configuration of the TAS tile with om staged-config --product-name=cf > /tmp/cf-config.yml

2. Open the cf-config.yml file and search the following lines:

 .properties.experimental_dynamic_egress_enforcement:
   value: true

3. Switch the value from true to false, which will look like the following:

 .properties.experimental_dynamic_egress_enforcement:
   value: false

4. After saving the file, configure these changes with om configure-product -c /tmp/cf-config.yml

5. Perform an Apply Changes against the TAS deployment. This will disable this feature.