...
The old managers can be kept as assisting managers with no external exposure or shut off until the new virtualization service is up and running
Other Options considered
Creating a fresh cluster and moving each gateway to the new one
Very disruptive and results in a long time of reduced capacity
Adding the new managers to the existing cluster
Additional configuration needed and no way of knowing if it’s working until they’re public facing
individual hosts in a cluster cannot be added to separate sandboxes, so the keepalived IPs would have to be shared, further complicating that
Setting it up without aquilon
this will remain the status quo for at least a few months. security patches and updates will remain necessary.