Anthos Service Mesh 1.8 has reached end of life and is no longer supported. See Upgrading from earlier versions.

View the latest documentation or select another available version:


Stay organized with collections Save and categorize content based on your preferences.

This page explains how to uninstall Anthos Service Mesh.

Uninstalling Anthos Service Mesh

Use the following commands to uninstall the Anthos Service Mesh components that were installed with the original configuration profile. These commands also delete the istio-system namespace and all custom resource definitions (CRDs), including any CRDs that you applied. If you created CRDs, make sure you have copies of them.

  1. Remove the control plane, by choosing one of these next steps, depending on your configuration:

    • If you installed Anthos Service Mesh on Anthos clusters on VMware, Anthos clusters on AWS, Amazon Elastic Kubernetes Service, or Microsoft Azure Kubernetes Service:

      istioctl manifest generate --manifests=YOUR_MANIFESTS_DIRECTORY --set profile=asm-multicloud | kubectl delete --ignore-not-found=true -f -
    • If you installed Anthos Service Mesh on Google Kubernetes Engine:

      istioctl manifest generate --manifests=YOUR_MANIFESTS_DIRECTORY --set profile=asm-gcp | kubectl delete --ignore-not-found=true -f -
  2. Delete the istio-system namespace:

     kubectl delete namespace istio-system
  3. Check if the deletion was successful:

     kubectl get ns

    The output should indicate a Terminating state and return as shown, otherwise you might have to manually delete any remaining resources in the namespace and try again.

     NAME                 STATUS       AGE
     istio-system         Terminating  71m
  4. Turn off sidecar auto-injection on your namespace(s), if it is enabled:

     kubectl get namespace YOUR_NAMESPACE --show-labels

    The output is similar to the following:

     demo   Active   4d17h

    If you see in the output under the LABELS column, remove it:

     kubectl label namespace YOUR_NAMESPACE

    If you see istio-injection in the output under the LABELS column, remove it:

     kubectl label namespace YOUR_NAMESPACE istio-injection-

    If you don't see either the or istio-injection labels, then auto-injection wasn't enabled on the namespace.