Resolving issues enabling Anthos Service Mesh through Google Cloud console
This section explains common Anthos Service Mesh problems and how to resolve them. If you need additional assistance, see Getting support.
Ensure you have sufficient permissions
To enable Anthos Service Mesh while creating a GKE cluster, you must have all of the following roles:
For information on granting roles, see Grant or revoke a single role.
Failed to enable Anthos Service Mesh through Google Cloud console
When enabling Anthos Service Mesh on a cluster, the enablement may fail. If the enablement fails, the Google Cloud console displays a message: "Anthos Service Mesh installation failed."
Enabling Anthos Service Mesh through the Google Cloud console creates a
ControlPlaneRevision custom resource in the cluster. This resource's status is
updated when the managed control plane is provisioned or fails provisioning and
contains an error message if enablement failed.
kubectl describe controlplanerevision -n istio-system
The output is similar to:
Name: asm-managed … Status: Conditions: Last Transition Time: 2021-08-05T18:56:32Z Message: The provisioning process has not completed successfully Reason: NotProvisioned Status: False Type: Reconciled Last Transition Time: 2021-08-05T18:56:32Z Message: Provisioning has finished Reason: ProvisioningFinished Status: True Type: ProvisioningFinished Last Transition Time: 2021-08-05T18:56:32Z Message: Unsupported Kubernetes version: v1.14.10 Reason: PreconditionFailed Status: True Type: Stalled
Status field is
True, then the control plane is
running successfully. The
Status field will be
the managed control plane provisioning process has encountered an error.
Message field will contain more information about
the specific error. See
for more information about possible errors.
The installation will be retried every 15 minutes, and the
ControlPlaneRevision custom resource will be updated to reflect the latest
status. However, the error message displayed in the Google Cloud console will not be
updated, even if installation later succeeds. Run the above command on your
cluster to check current status (once every 15 minutes).
If the installation has not succeeded after addressing the error message and
then waiting 15 minutes, you can
Configure managed Anthos Service Mesh with
to enable Anthos Service Mesh.
Alternatively, if the installation failed during GKE cluster creation, you can delete the cluster and try again.