Alibaba Cloud Service Mesh:CreateServiceMesh

The ID of the region where the Service Mesh instance resides.

The Istio version.

The virtual private cloud (VPC) ID.

Specifies whether to expose the API server to the Internet. Valid values:

• true: Exposes the API server to the Internet.

• false: Does not expose the API server to the Internet.

Default value: false.

Specifies whether to enable Tracing Analysis. Valid values:

• true: Enables Tracing Analysis.

• false: Disables Tracing Analysis.

Default value: false.

The name of the Service Mesh instance.

The virtual switch ID.

The tracing sampling percentage.

Specifies whether to use a self-managed Zipkin system. Valid values:

• true: Uses a self-managed Zipkin system.

• false: Uses Alibaba Cloud Tracing Analysis.

Default value: false.

Specifies whether to enable locality load balancing. Valid values:

• true: Enables locality load balancing.

• false: Disables locality load balancing.

Default value: false.

The configurations of locality load balancing.

Specifies whether to enable Prometheus monitoring. We recommend that you use Managed Service for Prometheus. Valid values:

• true: Enables Prometheus monitoring.

• false: Disables Prometheus monitoring.

Default value: false.

Specifies whether to integrate with the Open Policy Agent (OPA) plug-in. Valid values:

• true: Integrates with the OPA plug-in.

• false: Does not integrate with the OPA plug-in.

Default value: false.

The log level of the OPA proxy container.

The CPU resource request of the OPA proxy container. You can use the standard Kubernetes CPU format. For example, 1 indicates one vCPU.

The memory resource request of the OPA proxy container. You can use the standard Kubernetes memory format. For example, 1 Mi indicates 1024 KB.

The CPU resource limit of the OPA proxy container.

The memory resource limit of the OPA proxy container. You can use the standard Kubernetes memory format. For example, 1 Mi indicates 1024 KB.

Specifies whether to enable mesh audit. To enable this feature, you must first activate Simple Log Service. Valid values:

• true: Enables mesh audit.

• false: Disables mesh audit.

Default value: false.

The name of the Simple Log Service project that is used for mesh audit.

Default value: mesh-log-{meshId}.

The cluster domain.

The CPU resource request of the proxy container.

The memory resource request of the proxy container.

The CPU resource limit of the proxy container.

The memory resource limit of the proxy container.

The IP address ranges that are allowed to access the proxy.

The IP address ranges that are not allowed to access the proxy.

A comma-separated list of outbound ports to be excluded.

A comma-separated list of inbound ports to be excluded.

Specifies whether to enable OPA. Valid values:

• true: Enables OPA.

• false: Disables OPA.

Default value: false.

Specifies whether to enable the mesh topology feature. To enable this feature, you must first enable Prometheus monitoring. If Prometheus monitoring is disabled, this feature is forcibly disabled. Valid values:

• true: Enables the mesh topology feature.

• false: Disables the mesh topology feature.

Default value: false.

Specifies whether to enable access log. Valid values:

• true: Enables access log.

• false: Disables access log.

Default value: false.

Specifies whether to use a self-managed Prometheus system. Valid values:

• true: Uses a self-managed Prometheus system.

• false: Does not use a self-managed Prometheus system.

Default value: false.

The endpoint of the self-managed Prometheus system.

Specifies whether to enable the Redis filter. Valid values:

• true: Enables the Redis filter.

• false: Disables the Redis filter.

Default value: false.

Specifies whether to enable the MySQL filter. Valid values:

• true: Enables the MySQL filter.

• false: Disables the MySQL filter.

Default value: false.

Specifies whether to enable the Thrift filter. Valid values:

• true: Enables the Thrift filter.

• false: Disables the Thrift filter.

Default value: false.

Specifies whether to enable the WebAssembly filter. Valid values:

• true: Enables the WebAssembly filter.

• false: Disables the WebAssembly filter.

Default value: false.

Specifies whether to enable Microservices Engine (MSE). Valid values:

• true: Enables MSE.

• false: Disables MSE.

Default value: false.

Specifies whether to enable DNS proxy. Valid values:

• true: Enables DNS proxy.

• false: Disables DNS proxy.

Default value: false.

The edition of the ASM instance.

Specifies whether to enable an external service registry. Valid values:

• true: Enables an external service registry.

• false: Disables an external service registry.

Default value: false.

The ID of the Nacos instance.

Specifies whether to enable the Dubbo filter. Valid values:

• true: Enables the Dubbo filter.

• false: Disables the Dubbo filter.

Default value: false.

Specifies whether to enable gateway configuration filtering. Valid values:

• true: Enables gateway configuration filtering.

• false: Disables gateway configuration filtering.

Default value: false.

Specifies whether to enable the Secret Discovery Service (SDS). Valid values:

• true: Enables SDS.

• false: Disables SDS.

Default value: false.

Specifies whether to enable the gRPC Access Log Service (ALS) for Envoy. Valid values:

• true: Enables the gRPC ALS for Envoy.

• false: Disables the gRPC ALS for Envoy.

Default value: false.

The endpoint of the gRPC ALS for Envoy.

The port of the gRPC ALS for Envoy.

Specifies whether to enable the Gateway API. Valid values:

• true: Enables the Gateway API.

• false: Disables the Gateway API.

Default value: false.

Specifies whether to enable control plane log collection. Valid values:

• true: Enables control plane log collection.

• false: Disables control plane log collection.

Default value: false.

The Simple Log Service project for control plane log collection.

The custom format of access logs. This parameter is available only if you enable access log. The value must be a JSON string that contains the following keys: authority_for, bytes_received, bytes_sent, downstream_local_address, downstream_remote_address, duration, istio_policy_status, method, path, protocol, requested_server_name, response_code, response_flags, route_name, start_time, trace_id, upstream_cluster, upstream_host, upstream_local_address, upstream_service_time, upstream_transport_failure_reason, user_agent, and x_forwarded_for.

Specifies whether to enable or disable access log. Valid values:

• "": Disables access log.

• /dev/stdout: Enables access log.

The Simple Log Service project for access log collection.

Specifies whether to enable the history version management feature for Istio resources in ASM. Valid values:

• true: Enables the history version management feature.

• false: Disables the history version management feature.

Default value: false.

Specifies whether to enable data plane clusters to access Istio resources using the Kubernetes API. This feature is available only for ASM instances of v1.9.7.93 or later. Valid values:

• true: Enables data plane clusters to access Istio resources.

• false: Disables data plane clusters to access Istio resources.

Default value: false.

The specification of the Server Load Balancer (SLB) instance that is bound to the API server. Valid values: slb.s1.small, slb.s2.small, slb.s2.medium, slb.s3.small, slb.s3.medium, and slb.s3.large.

The specification of the SLB instance that is bound to Istio Pilot of the control plane. Valid values: slb.s1.small, slb.s2.small, slb.s2.medium, slb.s3.small, slb.s3.medium, and slb.s3.large.

The billing method of the SLB instance. Valid values:

• PayOnDemand: Pay-as-you-go.

• PrePay: Subscription.

This parameter is valid only if you set ChargeType to PrePay. The subscription duration of the SLB instance. Unit: months. If you want to purchase the instance for one year, enter 12.

Specifies whether to enable auto-renewal for the subscription SLB instance. Valid values:

• true: Enables auto-renewal.

• false: Disables auto-renewal.

This parameter is valid only if you set ChargeType to PrePay. The auto-renewal period. If the subscription duration is less than one year, the value of this parameter indicates the number of months for which you want to renew the instance. If the subscription duration is more than one year, the value of this parameter indicates the number of years for which you want to renew the instance.

The specification of the Service Mesh instance. Valid values:

• standard: Standard Edition.

• enterprise: Enterprise Edition.

• ultimate: Ultimate Edition.

Specifies whether to enable TLS performance optimization that is based on MultiBuffer. Valid values:

• true: Enables the feature.

• false: Disables the feature.

Default value: true.

The synchronization period of the MultiBuffer enabling status. Default value: 30s.

Specifies whether to use an existing certificate authority (CA) certificate and private key.

The CA certificate in Base64-encoded format. This parameter is typically used to migrate a self-managed Istio cluster to ASM. The value corresponds to the content of the ca-cert.pem file in the istio-ca-secret secret, which is in the istio-system namespace of the self-managed Istio cluster.

The CA private key in Base64-encoded format. This parameter is typically used to migrate a self-managed Istio cluster to ASM. The value corresponds to the content of the ca-key.pem file in the istio-ca-secret secret, which is in the istio-system namespace of the self-managed Istio cluster.

The type of the existing certificate:

• 1: A self-signed certificate of Istiod. This corresponds to the istio-ca-secret secret in the istio-system namespace. If you use this type, you must also provide the ExistingCaCert and ExsitingCaKey parameters.

• 2: An external certificate of Istiod. For more information, see plugin ca cert. This generally corresponds to the cacerts secret in the istio-system namespace. If you use this type, you must also provide the ExisingRootCaCert and ExisingRootCaKey parameters.

The existing root certificate.

The private key that corresponds to the existing root certificate.

The certificate chain from the CA certificate to the root certificate. The chain must contain at least two certificates.

When you create a Service Mesh instance, you can add a cluster to the instance. If you do not specify this parameter, no cluster is added. The cluster must be in the same VPC and vSwitch as the Service Mesh instance, and must have the same domain name.

Specifies whether to enable the Ambient Mesh mode for the Service Mesh instance.

The playground scenario. If you specify this parameter, an ASM playground instance is created. Valid value:

• ewmaLb: the exponentially weighted moving average (EWMA) load balancing scenario

Specifies whether to enable the ACMG mode.