Alibaba Cloud Service Mesh:UpdateNamespaceScopeSidecarConfig

The ID of the ASM instance.

The namespace for which you want to update the sidecar proxy configurations.

The range of IP addresses that are denied to access external services. (global.proxy.includelPRanges)

The range of IP addresses that are allowed to access external services. (global.proxy.excludelPRanges)

The port that the inbound traffic of the sidecar proxy passes through.

The port that the outbound traffic of the sidecar proxy does not pass through.

The port that the inbound traffic of the sidecar proxy does not pass through.

The port that the outbound traffic of the sidecar proxy passes through.

The maximum period of time that the sidecar proxy waits for a request to end.

The maximum number of CPU cores that are available to the sidecar proxy init container.

The maximum size of memory that is available to the sidecar proxy init container.

The minimum number of CPU cores that are requested by the sidecar proxy init container.

The minimum size of memory that is requested by the sidecar proxy init container.

The maximum number of CPU cores that are available to the sidecar proxy container.

The maximum size of memory that is available to the sidecar proxy container.

The minimum number of CPU cores that are requested by the sidecar proxy container.

The minimum size of memory that is requested by the sidecar proxy container.

The lifecycle of the sidecar proxy.

Specifies whether to enable the Domain Name System (DNS) proxy feature. Valid values:

• true: The DNS proxy feature is enabled.
• false: The DNS proxy feature is disabled.

The post-start parameters of Istio Proxy.

The pre-close parameters of Istio Proxy.

The number of worker threads to run in Istio Proxy.

The monitoring metrics for data collected by Envoy proxies. The value is in the JSON format.

Specifies whether applications can be started only after Istio Proxy starts. Valid values:

• true: Applications can be started only after Istio Proxy starts.
• false: Applications can be started before Istio Proxy starts.

The log level. Valid values: info, debug, tracing, and error.

The custom configurations of Tracing Analysis. The configurations must be serialized into JSON strings. The configurations contain the following parameters:

• sampling: The sampling rate, which is of the DOUBLE type.

• custom_tags: The custom tags added to reported spans, which are of the MAP type. The key of a tag is of the string type. The value of a tag is in the JSON format. A custom tag can belong to one of the following types:

  • literal: The tag value is a fixed value in the JSON format. This tag must contain the value field that specifies a literal. Example: {"value":"test"}.
  • header: The tag value is a request header in the JSON format. This tag must contain the name field and defaultValue field.The name field indicates the name of the request header. The defaultValue field indicates the default value that is used when no request header is available. Example: {"name":"test","defaultValue":"test"}.
  • environment: The tag value is an environment variable in the JSON format. This tag must contain the name field and defaultValue field. The name field indicates the name of the environment variable. The defaultValue field indicates the environment variable that is used when no environment variable is available. Example: {"name":"test","defaultValue":"test"}.

The mode in which the sidecar proxy intercepts inbound traffic. Valid values:

• REDIRECT: The sidecar proxy intercepts inbound traffic in the REDIRECT mode.
• TPROXY: The sidecar proxy intercepts inbound traffic in the TPROXY mode.

The environment variables that are added to a sidecar proxy. The environment variables are represented as JSON objects. The keys and values in the JSON objects represent the keys and values added to the environment variables of the sidecar proxy.

The maximum number of reclaimed CPU cores provided by Container Service for Kubernetes (ACK) that are available to the istio-init container. Reclaimed resources, including CPU cores and memory, are resources that can be dynamically overcommitted. This configuration item is used to set the maximum number of CPU cores that are available to the istio-init container in a pod labeled with koordinator.sh/qosClass. Unit: millicore.

The maximum size of reclaimed memory resources provided by ACK that are available to the istio-init container. This configuration item is used to set the maximum size of memory that is available to the istio-init container in a pod labeled with koordinator.sh/qosClass.

The minimum number of reclaimed CPU cores provided by ACK that the istio-init container requires at runtime. This configuration item is used to set the minimum number of reclaimed CPU cores for the istio-init container in a pod labeled with koordinator.sh/qosClass. Unit: millicore.

The minimum size of reclaimed memory provided by ACK that the istio-init container requires at runtime. This configuration item is used to set the minimum size of reclaimed memory for the istio-init container in a pod labeled with koordinator.sh/qosClass.

The maximum number of reclaimed CPU cores provided by ACK that are available to the sidecar proxy container. This configuration item is used to set the maximum number of CPU cores that are available to the sidecar proxy container in a pod labeled with koordinator.sh/qosClass. Unit: millicore.

The maximum size of reclaimed memory resources provided by ACK that are available to the sidecar proxy container. This configuration item is used to set the maximum size of memory that is available to the sidecar proxy container in a pod labeled with koordinator.sh/qosClass.

The minimum number of reclaimed CPU cores provided by ACK that the sidecar proxy container requires at runtime. This configuration item is used to set the minimum number of reclaimed CPU cores for the sidecar proxy container in a pod labeled with koordinator.sh/qosClass. Unit: millicore.

The minimum size of reclaimed memory provided by ACK that the sidecar proxy container requires at runtime. This configuration item is used to set the minimum size of reclaimed memory for the sidecar proxy container in a pod labeled with koordinator.sh/qosClass.

Specifies whether to enable the privileged mode in the security context of the sidecar proxy containers. Valid values:

• true: enables the privileged mode. This means that the sidecar proxy containers run in privileged mode.
• false: does not enable the privileged mode.

Specifies whether to enable the core dump feature for the sidecar proxy containers. Valid values:

• true
• false

The amount of time to wait before the first readiness check of a sidecar proxy container is performed. Unit: seconds.

The interval between two readiness checks of a sidecar proxy container. Unit: seconds.

The number of readiness check failures required before marking a sidecar proxy container as not ready.