The recommended way with controllers is to run in tunneled mode as much as possible and have the client VLANs only configured on the controller. That makes the configuration at the access point as simple as possible as there is no need to have those distributed access VLANs, and also security is enhanced as there is no access to those VLANs except at the controller. Having no WLAN client vlans at your access layer is one of the benefits/features of having a controller.
If you believe you need bridged VLANs, it could be that Aruba Instant (with Central or Airwave for central management/control/monitoring) is the better solution. Please work with your local Aruba partner or Aruba SE to get proper guidance for your specific scenario as exceptions may apply.
I noticed that in 8.2.1, the option to create bridged VLANs is available in the GUI again, it still is preferred to use tunneled SSID mode.