Check control plane implementation

Run the following command to identify your cluster's control plane implementation:

gcloud container fleet mesh describe --project FLEET_PROJECT_ID

The output is similar to the following:

  ...
  membershipSpecs:
    projects/746296320118/locations/us-central1/memberships/demo-cluster-1:
      mesh:
        management: MANAGEMENT_AUTOMATIC
  membershipStates:
    projects/746296320118/locations/us-central1/memberships/demo-cluster-1:
      servicemesh:
        controlPlaneManagement:
          details:
          - code: REVISION_READY
            details: 'Ready: asm-managed'
          state: ACTIVE
          implementation: TRAFFIC_DIRECTOR
  ...

The possible values of the implementation are:

• TRAFFIC_DIRECTOR: The core infrastructure of Google Cloud serves as the Cloud Service Mesh control plane.
• ISTIOD: managed instance of istiod serves as the Cloud Service Mesh control plane.
• UPDATING: The cluster is being migrated between implementations. Soon you will have the TRAFFIC_DIRECTOR implementation.

If you don't see controlPlaneManagement.state: ACTIVE this means you don't have a managed control plane. To confirm that you have an in-cluster control plane, check for an istiod deployment in your istio-system namespace:

kubectl -n istio-system get deploy istiod

The output is similar to the following:

NAME                   READY   UP-TO-DATE   AVAILABLE   AGE
istiod                 1/1     1            1           20m