if err != nil {
				// Parent may be "virtual" (for ldap, oidc, client tls auth,
				// custom auth plugin), so in such cases we apply no parent
				// policy. The session token will contain info about policy to
				// be applied.
				if !errors.Is(err, errNoSuchUser) {
					replLogIf(ctx, fmt.Errorf("Unable to heal temporary credentials %s from peer site %s -> %s : %w", user, latestPeerName, peerName, err))

during this process, or customize the ports to match the old defaults. See the [security advisory](https://istio.io/latest/news/security/istio-security-2021-002/) for more information. #### Other migrations If you see errors like `rendered manifests contain a resource that already exists` during installation, you may need to forcibly take ownership. The script below can handle this for you. Replace `RELEASE` and `NAMESPACE` with the name and namespace of the release: ```console KINDS=(service deployment)...