Alibaba Cloud Service Mesh:CreateServiceMesh

The ID of the region in which the ASM instance resides.

The Istio version of the ASM instance.

The ID of the virtual private cloud (VPC) in which the ASM instance resides.

Specifies whether to expose the API server to the Internet. Valid values:

• true
• false

Default value: false.

Specifies whether to enable the Tracing Analysis feature. Valid values:

• true
• false

Default value: false.

The name of the ASM instance.

The ID of the vSwitch to which the ASM instance is connected.

The sampling percentage of Tracing Analysis.

Specifies whether to use a self-managed Zipkin system to collect tracing data. Valid values:

• true: uses a self-managed Zipkin system to collect tracing data.
• false: uses Alibaba Cloud Tracing Analysis to collect tracing data.

Default value: false.

Specifies whether to route traffic to the nearest instance. Valid values:

• true
• false

Default value: false.

The configurations for the access to the nearest instance.

Specifies whether to enable Prometheus monitoring. We recommend that you use Prometheus Service of Application Real-Time Monitoring Service (ARMS). Valid values:

• true
• false

Default value: false.

Specifies whether to install the Open Policy Agent (OPA) plug-in. Valid values:

• true
• false

Default value: false.

The log level of the OPA container.

The minimum number of CPU cores that are required by the OPA container. You can specify the parameter value in the standard representation form of CPUs in Kubernetes. For example, if you set the value to 1, one CPU core is required.

The minimum size of the memory that is required by the OPA container. You can specify the parameter value in the standard quantity representation form used by Kubernetes. 1 Mi equals 1,024 KB.

The maximum number of CPU cores that are available to the OPA container.

The maximum size of the memory that is available to the OPA container. You can specify the parameter value in the standard quantity representation form used by Kubernetes. 1 Mi equals 1,024 KB.

Specifies whether to enable the mesh audit feature. To enable this feature, make sure that you have activated Log Service. Valid values:

• true
• false

Default value: false.

The name of the Log Service project that is used for mesh audit.

Default value: mesh-log-{ASM instance ID}.

ASM cluster domain.

The minimum number of CPU cores that are required by the proxy container.

The minimum size of the memory that is required by the proxy container.

The maximum number of CPU cores that are available to the proxy container.

The maximum size of the memory that is available to the proxy container.

The IP ranges in CIDR form for which traffic is to be redirected to the sidecar proxy in the ASM instance.

The IP ranges in CIDR form to be excluded from redirection to the sidecar proxy in the ASM instance.

The outbound ports to be excluded from redirection to the sidecar proxy in the ASM instance. Separate multiple port numbers with commas (,).

The inbound ports to be excluded from redirection to the sidecar proxy in the ASM instance. Separate multiple port numbers with commas (,).

Specifies whether to enable the OPA plug-in. Valid values:

• true
• false

Default value: false.

Specifies whether to enable the mesh topology feature. To enable this feature, make sure that you have enabled Prometheus monitoring. If Prometheus monitoring is disabled, you must set this parameter to false.`` Valid values:

• true
• false

Default value: false.

Specifies whether to enable access log collection. Valid values:

• true
• false

Default value: false.

Specifies whether to use a custom Prometheus instance. Valid values:

• true
• false

Default value: false.

The endpoint of the custom Prometheus instance.

Specifies whether to enable Redis Filter. Valid values:

• true
• false

Default value: false.

Specifies whether to enable MySQL Filter. Valid values:

• true
• false

Default value: false.

Specifies whether to enable Thrift Filter. Valid values:

• true
• false

Default value: false.

Specifies whether to enable WebAssembly Filter. Valid values:

• true
• false

Default value: false.

Specifies whether to enable Microservices Engine (MSE). Valid values:

• true
• false

Default value: false.

Specifies whether to enable the DNS proxy feature. Valid values:

• true
• false

Default value: false.

The edition of the ASM instance.

Specifies whether to enable the external service registry. Valid values:

• true
• false

Default value: false.

The instance ID of the Nacos registry.

Specifies whether to enable Dubbo Filter. Valid values:

• true
• false

Default value: false.

Specifies whether to enable gateway configuration filtering. Valid values:

• true
• false

Default value: false.

Specifies whether to enable Secret Discovery Service (SDS). Valid values:

• true
• false

Default value: false.

Specifies whether to enable gRPC Access Log Service (ALS) of Envoy. gRPC is short for Google Remote Procedure Call. Valid values:

• true
• false

Default value: false.

The endpoint of Envoy's gRPC ALS.

The port of Envoy's gRPC ALS.

Specifies whether to enable Gateway API. Valid values:

• true
• false

Default value: false.

Specifies whether to enable the collection of control plane logs. Valid values:

• true
• false

Default value: false.

The name of the Log Service project that is used to collect the logs of the control plane.

Custom fields of access logs. To set this parameter, you must enable access log collection. Otherwise, you cannot set this parameter. The value must be a JSON string. The following key values must be contained: authority_for, bytes_received, bytes_sent, downstream_local_address, downstream_remote_address, duration, istio_policy_status, method, path, protocol, requested_server_name, response_code, response_flags, route_name, start_time, trace_id, upstream_cluster, upstream_host, upstream_local_address, upstream_service_time, upstream_transport_failure_reason, user_agent, and x_forwarded_for.

Specifies whether to enable access log collection. Valid values:

• "": disables access log collection.
• /dev/stdout: enables access log collection. Access logs are written to /dev/stdout.

The SLS project from which access logs are collected.

Specifies whether to enable the rollback feature for Istio resources. Valid values:

• true
• false

Default value: false.

Specifies whether to allow the Kubernetes API of clusters on the data plane to access Istio resources. The version of the ASM instance must be V1.9.7.93 or later. Valid values:

• true
• false

Default value: false.

The type of the Classic Load Balancer (CLB) instance that is bound to the API server. Valid values: slb.s1.small, slb.s2.small, slb.s2.medium, slb.s3.small, slb.s3.medium, and slb.s3.large.

The type of the CLB instance that is bound to Istio Pilot. Valid values: slb.s1.small, slb.s2.small, slb.s2.medium, slb.s3.small, slb.s3.medium, and slb.s3.large.

The billing method of the CLB instance. Valid values:

• PayOnDemand: pay-as-you-go
• PrePay: subscription

The subscription period of the CLB instance. This parameter is valid only if ChargeType is set to PrePay. The value of this parameter indicates the subscription period of the CLB instance. Unit: month. For example, if the subscription period is one year, set this parameter to 12.

Specifies whether to enable auto-renewal for the CLB instance if the CLB instance uses the subscription billing method. Valid values:

• true
• false

The auto-renewal period of the subscription CLB instance. This parameter is valid only if ChargeType is set to PrePay. If the original subscription period of the CLB instance is less than one year, the value of this parameter indicates the number of months for auto-renewal. If the original subscription period of the CLB instance is more than one year, the value of this parameter indicates the number of years for auto-renewal.

The edition of the ASM instance. Valid values:

• standard: Standard Edition

• enterprise: Enterprise Edition

• ultimate: Ultimate Edition

Specifies whether to enable MultiBuffer-based Transport Layer Security (TLS) acceleration. Valid values:

• true

• false

Default value: true

The pull-request latency. Default value: 30. Unit: seconds.

Specifies whether to use an existing CA certificate and private key.

The existing CA certificate, which is encoded in Base64. This parameter is used in scenarios where you migrate open source Istio to ASM. It specifies the content of the ca-cert.pem file in the istio-ca-secret secret. The secret is in the istio-system namespace of the Kubernetes cluster where the open source Istio is installed.

The existing CA key, which is encoded in Base64. This parameter is used in scenarios where you migrate open source Istio to ASM. It specifies the content of the ca-key.pem file in the istio-ca-secret secret. The secret is in the istio-system namespace of the Kubernetes cluster where the open source Istio is installed.

The type of the existing CA certificate. Valid values:

• 1: Self-signed certificate generated by istiod. The certificate corresponds to the secret named istio-ca-secret in the istio-system namespace. If you use this type of certificate, you must set the ExistingCaCert and ExsitingCaKey parameters.
• 2: Administrator-specified certificate. For more information, see plugin ca cert. In most cases, the certificate corresponds to the secret named cacerts in the istio-system namespace. If you use this type of certificate, you must set the ExisingRootCaCert and ExisingRootCaKey parameters.

The existing root certificate, which is encoded in Base64.

The private key that corresponds to the root certificate, which is encoded in Base64.

The certificate chain from CaCert to RootCert contains at least two certificates.

When you create an ASM instance, you can add a cluster to the ASM instance. If you do not specify this parameter, no cluster is added to the ASM instance. The cluster and the ASM instance must be in the same vSwitch of the same VPC and have the same domain name.

Tag of the ASM instance. A tag contains the following information:

• key: the name of the tag
• value: the value of the tag

Specifies whether to enable the Ambient Mesh mode for the ASM instance.