Creates an Alibaba Cloud Service Mesh (ASM) instance.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
RegionId String Yes cn-hangzhou

The ID of the region where the ASM instance resides.

VpcId String Yes vpc-xzelac2tw4ic7wz31****

The ID of the virtual private cloud (VPC).

VSwitches String Yes ["vsw-xzegf5dndkbf4m6eg****"]

The ID of the vSwitch.

IstioVersion String No v1.5.4.1-g5960ec40-aliyun

The Istio version of the ASM instance.

Name String No mesh1

The name of the ASM instance.

ApiServerPublicEip Boolean No false

Specifies whether to expose the API server to the Internet.

Valid values: true and false. Default value: false.

If you do not set this parameter, the API server of the clusters cannot be accessed from the Internet.

PilotPublicEip Boolean No false

Specifies whether to expose Istio Pilot to the Internet.

Valid values: true and false. Default value: false.

If you do not set this parameter, only the clusters in the same VPC as the ASM instance can access Istio Pilot of the ASM instance.

Tracing Boolean No false

Specifies whether to enable the tracing feature. To enable this feature, make sure that you have activated Tracing Analysis.

Valid values: true and false. Default value: false.

TraceSampling Float No 100

The sampling percentage of tracing.

LocalityLoadBalancing Boolean No false

Specifies whether to route traffic to the nearest instance.

Valid values: true and false. Default value: false.

Telemetry Boolean No false

Specifies whether to enable Prometheus monitoring. We recommend that you use Prometheus Service of Application Real-Time Monitoring Service (ARMS).

EnableAudit Boolean No false

Specifies whether to enable the mesh audit feature. To enable this feature, make sure that you have activated Log Service.

Valid values: true and false. Default value: false.

AuditProject String No mesh-log-xxxx

The name of the Log Service project that is used for mesh audit.

Default value: mesh-log-{ASM instance ID}.

OpenAgentPolicy Boolean No false

Specifies whether to enable the Open Policy Agent (OPA) plug-in.

Valid values: true and false. Default value: false.

OPARequestCPU String No 1

The number of CPU cores that are requested by the OPA container.

OPARequestMemory String No 512Mi

The size of the memory that is requested by the OPA container.

OPALimitCPU String No 2

The maximum number of CPU cores that are available to the OPA container.

OPALimitMemory String No 1024Mi

The maximum size of the memory that is available to the OPA container.

OPALogLevel String No info

The log level of the OPA container.

ProxyRequestCPU String No 100m

The number of CPU cores that are requested by the proxy container.

ProxyRequestMemory String No 128Mi

The size of the memory that is requested by the proxy container.

ProxyLimitCPU String No 2000m

The maximum number of CPU cores that are available to the proxy container.

ProxyLimitMemory String No 1024Mi

The maximum size of the memory that is available to the proxy container.

IncludeIPRanges String No *

The IP addresses that are denied to access external services.

ExcludeIPRanges String No 100.100.100.100

The IP addresses that are allowed to access external services.

ExcludeOutboundPorts String No 80,81

The outbound ports. Separate multiple port numbers with commas (,).

ExcludeInboundPorts String No 80,81

The inbound ports. Separate multiple port numbers with commas (,).

OpaEnabled Boolean No false

Specifies whether to enable the OPA plug-in.

KialiEnabled Boolean No false

Specifies whether to enable Kiali. To enable Kiali, make sure that Prometheus monitoring is enabled. If Prometheus monitoring is disabled, the value of this parameter must be false.

AccessLogEnabled Boolean No false

Specifies whether to collect access logs.

CustomizedPrometheus Boolean No false

Specifies whether to use a custom Prometheus instance.

PrometheusUrl String No http://prometheus:9090

The endpoint of the custom Prometheus instance.

Response parameters

Parameter Type Example Description
RequestId String BD65C0AD-D3C6-48D3-8D93-38D2015C****

The ID of the request.

ServiceMeshId String c08ba3fd1e6484b0f8cc1ad8fe10d****

The ID of the ASM instance.

Examples

Sample requests

http(s)://[Endpoint]/?Action=CreateServiceMesh
&RegionId=cn-hangzhou
&VpcId=vpc-xzelac2tw4ic7wz31****
&VSwitches=["vsw-xzegf5dndkbf4m6eg****"]
&<Common request parameters>

Sample success responses

XML format

<RequestId>BD65C0AD-D3C6-48D3-8D93-38D2015C****</RequestId>
<ServiceMeshId>c08ba3fd1e6484b0f8cc1ad8fe10d****</ServiceMeshId>

JSON format

null

Error codes

HTTP status code Error code Error message Description
404 ERR404 Not found The requested resource does not exist.

For a list of error codes, visit the API Error Center.