Mantenha tudo organizado com as coleções
Salve e categorize o conteúdo com base nas suas preferências.
Migrar do IstioOperator
O plano de controle gerenciado não é compatível diretamente com IstioOperator para
personalização. A migração para o plano de controle gerenciado do Cloud Service Mesh requer
conversão manual de um IstioOperator. Essa ferramenta ajuda a reduzir o atrito
automatizando esse processo.
Sobre a ferramenta de migração
A ferramenta de migração avalia de forma não destrutiva o arquivo IstioOperator fornecido
para fazer o seguinte:
Verifique se há problemas de compatibilidade.
Converta configurações IstioOperator compatíveis para uma configuração compatível
com o plano de controle gerenciado. Isso gera as novas configurações em arquivos.
Avisos de saída sobre valores de configuração que entrariam em conflito com os valores padrão exigidos pelo plano de controle gerenciado.
Recomende como usar os arquivos gerados.
Essa ferramenta não examina dados ou configurações de cluster, nem faz alterações em uma configuração de cluster. Aplique separadamente todos os arquivos gerados.
Antes de usar a ferramenta de migração, verifique as limitações nos
recursos compatíveis com o plano de controle gerenciado
para conferir se o plano de controle gerenciado é compatível com a instalação do Cloud Service Mesh.
Como usar a ferramenta de migração
A ferramenta de migração está disponível como parte do script asmcli. É necessário fazer o download do script para usar essa ferramenta.
Observe a saída dos arquivos listados pela ferramenta, especificamente asm/*meshconfig.yaml e asm/gateways*.
Examine os avisos de configuração.
Analise o resultado e siga as ações necessárias para a migração.
Campos MeshConfig não compatíveis
Os campos a seguir no MeshConfig são modificados pelo plano de controle gerenciado.
trustDomain
trustDomainAliases
configSources
defaultConfig.proxyMetadata: esses campos específicos são modificados. É possível adicionar novos campos:
XDS_ROOT_CA
CA_ROOT_CA
OUTPUT_CERTS
XDS_AUTH_PROVIDER
PROXY_CONFIG_XDS_AGENT
defaultConfig.meshId
defaultConfig.discoveryAddress
Exemplo de saída
$ asmcli experimental mcp-migrate-check -f some-iop.yaml
asmcli: Downloading ASM..
Generating equivalent configuration for Anthos Service Mesh managed control plane...
Migrating MeshConfig settings...
✔ Wrote MeshConfig to asm-generated-configs/meshconfig.yaml.
Migrating gateway deployments...
Checking configuration compatibility...
! Found unsupported configurations:
Components.Base: not configurable in managed control plane
Components.Pilot: not configurable in managed control plane
Hub=gcr.io/gke-release/asm: not configurable in managed control plane
Tag=1.10.4-asm.6: not configurable in managed control plane
Actions required to migrate:
! Found potentially unsupported configurations; review warnings above before proceeding
- Found custom mesh configuration settings. To apply these settings to ASM managed
control plane, run: `kubectl apply -f 'asm-generated-configs/meshconfig.yaml'`
TIP: steps recommending `kubectl apply` to be run should be integrated into your
CI/CD pipeline, if applicable.
[[["Fácil de entender","easyToUnderstand","thumb-up"],["Meu problema foi resolvido","solvedMyProblem","thumb-up"],["Outro","otherUp","thumb-up"]],[["Difícil de entender","hardToUnderstand","thumb-down"],["Informações incorretas ou exemplo de código","incorrectInformationOrSampleCode","thumb-down"],["Não contém as informações/amostras de que eu preciso","missingTheInformationSamplesINeed","thumb-down"],["Problema na tradução","translationIssue","thumb-down"],["Outro","otherDown","thumb-down"]],["Última atualização 2025-08-19 UTC."],[],[],null,["# Migrate from IstioOperator\n==========================\n\n|\n| **Preview\n| --- Migration tool**\n|\n|\n| This feature is subject to the \"Pre-GA Offerings Terms\" in the General Service Terms section\n| of the [Service Specific Terms](/terms/service-terms#1).\n|\n| Pre-GA features are available \"as is\" and might have limited support.\n|\n| For more information, see the\n| [launch stage descriptions](/products#product-launch-stages).\n\nManaged control plane doesn't directly support `IstioOperator` for\ncustomization. Migrating to managed control plane from Cloud Service Mesh requires\nmanually converting from an `IstioOperator`. This tool helps reduce the friction\nby automating that process.\n\nAbout the migration tool\n------------------------\n\nThe migration tool non-destructively evaluates the provided `IstioOperator` file\nto do the following:\n\n- Check for compatibility issues.\n- Convert compatible `IstioOperator` configurations to configuration supported by managed control plane, outputting the new configurations to files.\n- Output warnings about configuration values that would conflict with default values required by managed control plane.\n- Recommend how to use the generated files.\n\nThis tool does not examine cluster data or configurations nor does it make\nchanges to a cluster configuration. You must separately apply all generated\nfiles.\n\nBefore using the migration tool, check the limitations on\n[managed control plane supported features](/service-mesh/docs/supported-features-managed)\nto verify that managed control plane supports your installation of Cloud Service Mesh.\n\nUsing the migration tool\n------------------------\n\n| **Warning:** GitOps tools (including Config Sync, Argo CD, Terraform, and Jenkins) may interfere with your Cloud Service Mesh installation, migration, or upgrade processes. For best results, disable your GitOps tools before you install, migrate, or upgrade Cloud Service Mesh.\n\nThe migration tool is available as part of the `asmcli` script. You must\n[download the script](/service-mesh/docs/unified-install/get-started#download_asmcli)\nto use this tool.\n\n1. Run the migration tool:\n\n ```\n asmcli experimental mcp-migrate-check -f path/to/istiooperator.yaml\n ```\n2. Note the listed files output by the tool, specifically `asm/*meshconfig.yaml`\n and `asm/gateways*`.\n\n3. Examine configuration warnings.\n\n4. Review the output and follow the actions required to migrate.\n\nUnsupported MeshConfig fields\n-----------------------------\n\nThe following fields on MeshConfig are overridden by managed control plane.\n| **Note:** This list of fields is subject to change.\n\n- `trustDomain`\n- `trustDomainAliases`\n- `configSources`\n- `defaultConfig.proxyMetadata` - These specific fields are overridden. You can add new fields:\n - `XDS_ROOT_CA`\n - `CA_ROOT_CA`\n - `OUTPUT_CERTS`\n - `XDS_AUTH_PROVIDER`\n - `PROXY_CONFIG_XDS_AGENT`\n- `defaultConfig.meshId`\n- `defaultConfig.discoveryAddress`\n\nExample output\n--------------\n\n```sh\n$ asmcli experimental mcp-migrate-check -f some-iop.yaml\nasmcli: Downloading ASM..\nGenerating equivalent configuration for Anthos Service Mesh managed control plane...\n\nMigrating MeshConfig settings...\n✔ Wrote MeshConfig to asm-generated-configs/meshconfig.yaml.\n\nMigrating gateway deployments...\n\nChecking configuration compatibility...\n! Found unsupported configurations:\n Components.Base: not configurable in managed control plane\n Components.Pilot: not configurable in managed control plane\n Hub=gcr.io/gke-release/asm: not configurable in managed control plane\n Tag=1.10.4-asm.6: not configurable in managed control plane\n\nActions required to migrate:\n! Found potentially unsupported configurations; review warnings above before proceeding\n- Found custom mesh configuration settings. To apply these settings to ASM managed\n control plane, run: `kubectl apply -f 'asm-generated-configs/meshconfig.yaml'`\n\nTIP: steps recommending `kubectl apply` to be run should be integrated into your\n CI/CD pipeline, if applicable.\n```\n\nWhat's next\n-----------\n\n- Learn more about [managed control plane supported features](/service-mesh/docs/supported-features-managed)"]]
