Resolving issues enabling Cloud Service Mesh throughGoogle Cloud console

This section explains common Cloud Service Mesh problems and how to resolve them.If you need additional assistance, seeGetting support.

Ensure you have sufficient permissions

To enable Cloud Service Mesh while creating a GKE cluster, youmust have all of the following roles:

For information on granting roles, seeGrant or revoke a single role.

Failed to enable Cloud Service Mesh through Google Cloud console

When enabling Cloud Service Mesh on a cluster, the enablement may fail.If the enablement fails, the Google Cloud console displays a message: "Cloud Service Meshinstallation failed."

Enabling Cloud Service Mesh through the Google Cloud console creates aControlPlaneRevision custom resource in the cluster. This resource's status isupdated when the managed control plane is provisioned or fails provisioning andcontains an error message if enablement failed.

kubectl describe controlplanerevision -n istio-system

The output is similar to:

    Name:         asm-managed    …    Status:      Conditions:        Last Transition Time:  2021-08-05T18:56:32Z        Message:               The provisioning process has not completed successfully        Reason:                NotProvisioned        Status:                False        Type:                  Reconciled        Last Transition Time:  2021-08-05T18:56:32Z        Message:               Provisioning has finished        Reason:                ProvisioningFinished        Status:                True        Type:                  ProvisioningFinished        Last Transition Time:  2021-08-05T18:56:32Z        Message:               Unsupported Kubernetes version: v1.14.10        Reason:                PreconditionFailed        Status:                True        Type:                  Stalled

If theType: ReconciledStatus field isTrue, then the control plane isrunning successfully. TheType: StalledStatus field will beTrue ifthe managed control plane provisioning process has encountered an error.IfStalled, theMessage field will contain more information aboutthe specific error. SeeStalled codesfor more information about possible errors.

The installation will be retried every 15 minutes, and theControlPlaneRevision custom resource will be updated to reflect the lateststatus. However, the error message displayed in the Google Cloud console will not beupdated, even if installation later succeeds. Run the above command on yourcluster to check current status (once every 15 minutes).

If the installation has not succeeded after addressing the error message andthen waiting 15 minutes, you canConfigure managed Cloud Service Mesh withasmclito enable Cloud Service Mesh.

Alternatively, if the installation failed during GKE clustercreation, you can delete the cluster and try again.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.