If you delete a label from the config.yaml
file in your GKE cluster, the Google Cloud Platform plugin for Panorama
deletes the NAT rule and service object on Panorama, but the change
is not pushed, so the managed firewalls retain the NAT rule and service
object.