Resolving issues enabling Cloud Service Mesh through Google Cloud console
This section explains common Cloud Service Mesh problems and how to resolve them. If you need additional assistance, see Getting support .
Ensure you have sufficient permissions
To enable Cloud Service Mesh while creating a GKE cluster, you must have all of the following roles:
For information on granting roles, see Grant or revoke a single role .
Failed to enable Cloud Service Mesh through Google Cloud console
When enabling Cloud Service Mesh on a cluster, the enablement may fail. If the enablement fails, the Google Cloud console displays a message: "Cloud Service Mesh installation failed."
Enabling Cloud Service Mesh through the Google Cloud console creates a ControlPlaneRevision
custom resource in the cluster. This resource's status is
updated when the managed control plane is provisioned or fails provisioning and
contains an error message if enablement failed.
kubectl describe controlplanerevision -n istio-system
The output is similar to:
Name: asm-managed … Status: Conditions: Last Transition Time: 2021-08-05T18:56:32Z Message: The provisioning process has not completed successfully Reason: NotProvisioned Status: False Type: Reconciled Last Transition Time: 2021-08-05T18:56:32Z Message: Provisioning has finished Reason: ProvisioningFinished Status: True Type: ProvisioningFinished Last Transition Time: 2021-08-05T18:56:32Z Message: Unsupported Kubernetes version: v1.14.10 Reason: PreconditionFailed Status: True Type: Stalled
If the Type: Reconciled
Status
field is True
, then the control plane is
running successfully. The Type: Stalled
Status
field will be True
if
the managed control plane provisioning process has encountered an error.
If Stalled
, the Message
field will contain more information about
the specific error. See Stalled codes
for more information about possible errors.
The installation will be retried every 15 minutes, and the ControlPlaneRevision
custom resource will be updated to reflect the latest
status. However, the error message displayed in the Google Cloud console will not be
updated, even if installation later succeeds. Run the above command on your
cluster to check current status (once every 15 minutes).
If the installation has not succeeded after addressing the error message and
then waiting 15 minutes, you can Configure managed Cloud Service Mesh with asmcli
to enable Cloud Service Mesh.
Alternatively, if the installation failed during GKE cluster creation, you can delete the cluster and try again.