Migrating out of the legacy spaceยป
If you started using Spacelift before the introduction of spaces, most of your resources were moved to the legacy space to provide backwards compatibility with your existing setup. Access policies also only work in the legacy space.
To get the most out of Spacelift, you'll want to move out of the legacy space into other spaces. Choose a new space for each resource (stacks, policies, worker pools, contexts, etc.) in its settings. When doing so, remember:
- Moving resources can't break any relationships between them. For example, if you have a policy attached to a stack, you can't move the policy to a space where it won't be accessible to the stack.
- You have to move resources one by one, which means that moving stacks with their attachments (policies, contexts, worker pools, etc.) needs to be done in multiple steps.
Migration processยป
- Create your new space as a child of the
rootspace with inheritance enabled. - Move all the attachable resources (policies, contexts, worker pools, etc.) from the
legacyspace to therootspace. This way they're accessible from both thelegacyspace and your new space. - Move the stacks to your new space.
- Move the attachable resources to your new space.

Replace access policiesยป
To stop using access policies in the legacy space, implement space access control and RBAC via login policies. The moment the login policy specifies roles for a user for the legacy space, access policies will stop being evaluated for the user.