Skip to content

View a Migration Plan

When you open a migration plan from the Migration Plans tab on the Dashboard, the suite displays detailed guidance and outputs organized across several tabs. Each tab focuses on a different aspect of the migration.

The Overview tab provides a high-level summary of the plan.

Key information displayed:

  • Source cluster type
  • Target cluster type
  • Environment type (Production or Non-Production)
  • Migration scope summary
  • Recommended migration tool
  • Reason for the recommendation
  • Alternative tools
  • Key migration notes

Rollback characteristics: When the plan was created with a rollback requirement, the Overview tab includes a plain-language statement of each tool’s rollback capability:

ToolRollback characteristic shown
MirrorMaker 2Supports reverse replication back to the source cluster
ReplicatorSupports reverse replication back to the source cluster
Cluster Link (Confluent ↔ Confluent)Rollback possible only while both ends remain Confluent clusters
Cluster Link (non-Confluent source, rollback required)Excluded from recommendation and alternatives; rationale explains that a cluster link destination must be Confluent
WarpStream OrbitPromotion is irreversible; no rollback after promotion

When schema migration is part of the plan, the Overview tab also states that schema migration has no reverse path.

From this tab, you can initiate job creation directly by clicking Create Migration Job.

Plan overview tab


The Gateway tab presents an architecture overview diagram and a checklist-driven implementation plan for deploying the gateway. Above the diagram, a Selected gateway card names the gateway resource this plan uses, with its namespace and a link into the builder.

The diagram itself is fixed. The only text that varies in it is the gateway node’s label, which follows the destination type rather than the gateway you picked, so it reads “CC Gateway” or “CPC Gateway”. As you work through the checklist, the diagram lights up its gateway, connection, and application elements stage by stage.

The checklist is generated from the gateway resource selected in the plan wizard, so its contents vary with that gateway’s authentication mode and broker identification strategy.

  1. Prepare Configuration

    • Review gateway.yaml and replace all placeholder values.
    • Place TLS certificates in the ssl directory.
    • On a swapping gateway only: configure the JAAS files with client and broker credentials, jaas-config.conf for client auth and jaas-template.conf for broker auth.
    • On a host/SNI gateway only: configure a DNS wildcard record for the gateway’s domain, so every broker hostname resolves to the gateway IP.
  2. Deploy Gateway

    • Run kubectl apply -f kubernetes-deployment.yaml.
    • Verify the metrics endpoint is reachable at :9190/metrics.
    • Confirm the gateway can reach both the source and the target cluster.
  3. Repoint Applications

    • Update bootstrap.servers in every application to the gateway endpoint, which the item names inline: the gateway’s own domain on port 19092 for a host/SNI gateway, otherwise gateway:19092.
    • Replace gateway.yaml with gateway-cutover.yaml and restart the gateway, which routes client traffic through the target cluster.
    • Verify produce and consume operations work through the gateway.
  4. Monitoring

    • Import prometheus-scrape.yaml into Prometheus.

An MSK-to-Confluent-Cloud plan that opted into the automated migration path shows a different checklist here: reviewing the three gateway CRs, applying the initial one, then running the migration initialize and execute stages. On that path the diagram does not track progress. Its stages don’t correspond to the ones the diagram watches, so it renders fully lit from the moment the tab opens and tells you nothing about how far along you are.

Gateway architecture overview

Gateway deployment checklist


The Network tab consolidates all networking details relevant to the migration.

FieldDescription
SourceNetwork type, region, and access configuration for the source cluster
DestinationNetwork type, region, and access configuration for the destination cluster
Trust BoundaryHow traffic crosses between source and destination networks
Security ProtocolsEncryption and authentication mechanisms in use
CategoryPurpose
DataPorts used for Kafka broker communication and data replication
ManagementPorts for administrative APIs and cluster management
MonitoringPorts for metrics collection and health checks
  • Provision and install TLS certificates.
  • Configure load balancers for gateway or broker endpoints.
  • Enable encryption in transit for all data paths.
  • DNS resolution from all relevant hosts.
  • Bidirectional network reachability between source, destination, and gateway.
  • Successful TLS handshake confirmation.

The suite surfaces warnings for conditions that may affect the migration:

  • Bandwidth and egress cost implications for cross-cloud or cross-region traffic.
  • Latency concerns that could impact replication lag or consumer group synchronization.

Network tab details


The Cutover tab provides a detailed migration strategy tailored to your plan inputs. For Gateway-Assisted migrations, this tab emphasizes zero-downtime procedures with at-least-once delivery guarantees.

  1. Route Redirection: The gateway instantly redirects traffic from the source cluster to the destination cluster. No application restarts are required.

  2. Integrity Management: Prepare for potential duplicate messages during the transition window. Implement application-side idempotency where strict deduplication is required.

  3. Decommissioning: After validation confirms that all workloads are running against the destination cluster, retire the source cluster.

When using Gateway-Assisted migration, producers and consumers do not need connection string changes. The gateway transparently routes traffic to the active cluster.

The Cutover tab always includes a Rollback Steps section. Its contents depend on the recommended tool and topology.

When the tool supports rollback (MM2, Replicator, or Cluster Link between Confluent clusters):

  1. Redirect the gateway back to the source cluster (gateway-assisted) or reconfigure applications to point to the source (standard migration).

  2. Verify that all producers and consumers have reconnected to the source.

  3. Validate message integrity and consumer group offsets on the source cluster. The rollback steps carry the same X-Ray monitoring guidance as the forward cutover steps.

  4. Investigate the root cause before reattempting cutover.

When rollback is not available for the topology (Cluster Link with a non-Confluent source, or WarpStream Orbit after promotion):

The section shows a notice stating that rollback is not available for this topology and explaining why, instead of rollback steps.

Cutover strategy and procedures


The Applications tab displays discovered and refreshed application dependencies tied to the source cluster.

Sections include:

  • Consumer Groups: Groups consuming from source topics, with lag and membership details.
  • Schemas: Schema subjects registered in the source Schema Registry.
  • Producers: Applications producing to source topics.
  • Connectors: Kafka Connect connectors interacting with the source cluster.

Application dependencies tab


The Assets tab serves as a centralized resource hub with downloadable artifacts generated from the plan.

Available downloads:

AssetDescription
Exported Plan DataFull plan configuration in a portable format
Cost ReportEstimated costs for the migration based on scope and infrastructure
Application InventoryExport of discovered applications, consumer groups, and producers
Connector InventoryExport of Kafka Connect connectors associated with the source cluster
Schema InventoryExport of schema subjects and compatibility settings
Gateway AssetsGateway configuration files, TLS templates, and Docker Compose or Kubernetes manifests
Infrastructure AssetsNetwork diagrams, port mappings, and setup checklists
Terraform PackagesPre-generated Terraform modules for provisioning destination infrastructure
SMT Sample Source (Cloudera sources)Downloadable sample Java source for the Cloudera re-frame Single Message Transform. Present when the source uses Cloudera-native serialization.

SMT Sample Source (Cloudera sources):

When the source uses Cloudera-native serialization, the Assets tab provides a downloadable sample Java SMT source file that you build into a jar and install on the Connect worker’s plugin path before the job starts.

The matching copyable SMT configuration block (transform class name and required properties) is on the plan’s Schemas tab. It appears when re-framing is required (Cloudera protocol 1, 2, or 3), and the class name in the block matches the class name in the sample source. Paste it into the MirrorMaker 2 or Replicator Transforms section.

When you create a migration job from a plan that recommends an SMT, the job wizard’s Transforms section in Advanced Settings is pre-filled with the recommended class name and properties (the value transform). You can edit these values before submitting.

Assets tab with downloadable artifacts


Once you have reviewed the plan and are satisfied with the guidance, you can create a migration job directly from the plan.

  1. Open the plan from the Migration Plans tab.

  2. On the Overview tab, click Create Migration Job.

  3. The suite opens the job creation flow with plan inputs pre-applied to the configuration.

  4. Review and refine the job settings as needed.

  5. Submit the job to begin execution through the standard migration workflow.