由于應用服務網格CSM格控制面部署在租戶的云容器引擎集群上，開通過程中會主集群安裝CRD，部署相關控制面服務等，如果您在自己的云容器引擎集群上已經安裝了相同的資源，可能導致資源沖突，需要您確認是否可以刪除當前云容器引擎集群上的沖突資源是否可以刪除，確認刪除沖突資源后再重新開通服務網格。
服務網格CSM安裝過程中需要新增的CRD如下：
authorizationpolicies.security.istio.io
customproxyconfigs.networking.istio.io
destinationrules.networking.istio.io
envoyfilters.networking.istio.io
gateways.networking.istio.io
istiooperators.install.istio.io
localratelimiters.networking.istio.io
peerauthentications.security.istio.io
proxyconfigs.networking.istio.io
requestauthentications.security.istio.io
serviceentries.networking.istio.io
sidecars.networking.istio.io
telemetries.telemetry.istio.io
trafficlabels.networking.istio.io
virtualservices.networking.istio.io
wasmplugins.extensions.istio.io
workloadentries.networking.istio.io
workloadgroups.networking.istio.io
新增資源部署如下：
| apiVersion | Kind | Namespace | Name |
|---|---|---|---|
| apps/v1 | Deployment | istio-system | istio-eastwestgateway |
| networking.istio.io/v1alpha3 | Gateway | istio-system | istiod-gateway |
| networking.istio.io/v1alpha3 | VirtualService | istio-system | istiod-vs |
| rbac.authorization.k8s.io/v1 | ClusterRole | istio-system | istio-eastwestgateway-sds |
| rbac.authorization.k8s.io/v1 | ClusterRoleBinding | istio-system | istio-eastwestgateway-sds |
| v1 | Service | istio-system | istio-eastwestgateway |
| v1 | ServiceAccount | istio-system | istio-eastwestgateway-service-account |
| rbac.authorization.k8s.io/v1 | ClusterRole | istio-system | istio-operator |
| rbac.authorization.k8s.io/v1 | ClusterRoleBinding | istio-system | istio-operator |
| install.istio.io/v1alpha1 | IstioOperator | istio-system | istiocontrolplane |
| apps/v1 | Deployment | istio-system | istio-operator |
| v1 | Service | istio-system | istio-operator |
| v1 | ServiceAccount | istio-system | istio-operator |
| v1 | Endpoints | opa-istio | admission-controller |
| v1 | Service | opa-istio | admission-controller |
| admissionregistration.k8s.io/v1 | MutatingWebhookConfiguration | 無 | opa-istio-admission-controller |
