UpdateMeshFeature

The operation that you want to perform. Set the value to UpdateMeshFeature.

The ID of the ASM instance.

Specifies whether to enable the tracing feature. To enable this feature, make sure that you have activated Tracing Analysis. Valid values:

• true: enables the tracing feature.
• false: disables the tracing feature.

Default value: false

The sampling percentage of tracing.

Specifies whether to enable the feature of routing traffic to the nearest instance. Valid values:

• true: enables the feature.
• false: disables the feature.

Default value: false

The configurations for the access to the nearest instance.

Specifies whether to enable Prometheus monitoring. We recommend that you use Prometheus Service of Application Real-Time Monitoring Service (ARMS). Valid values:

• true: enables Prometheus monitoring.
• false: disables Prometheus monitoring.

Default value: false

Specifies whether to install the Open Policy Agent (OPA) plug-in. Valid values:

• true: installs the OPA plug-in.
• false: does not install the OPA plug-in.

Default value: false

The log level of OPA.

• info: logs all information.
• debug: logs debugging and error information.
• error: logs only error information.

The number of CPU cores that are requested by OPA.

The size of the memory that is requested by OPA.

The maximum number of CPU cores that are available to OPA.

The maximum size of the memory that is available to OPA.

Specifies whether to enable the mesh audit feature. To enable this feature, make sure that you have activated Log Service. Valid values:

• true: enables the mesh audit feature.
• false: disables the mesh audit feature.

Default value: false

The name of the Log Service project that is used for mesh audit.

Default value: mesh-log-{meshId}

Specifies whether to enable custom Zipkin system. Valid values:

• true: enables custom Zipkin system.
• false: disables custom Zipkin system.

Default value: false

The policy of handling outbound traffic. Valid values:

• ALLOW_ANY: allows outbound traffic to external services.
• REGISTRY_ONLY: allows outbound traffic to only external services defined in the service registry of the ASM instance.

The number of CPU cores that are requested.

The size of the memory that is requested.

The maximum number of CPU cores.

The maximum size of the memory.

The IP addresses that are denied to access external services.

The IP addresses that are allowed to access external services.

The outbound ports. Separate multiple port numbers with commas (,).

The inbound ports that allow all inbound traffic to bypass the sidecar proxy.

The inbound ports. Separate multiple port numbers with commas (,).

Specifies whether to enable automatic sidecar injection for all namespaces. Valid values:

• true: enables automatic sidecar injection for all namespaces.
• false: disables automatic sidecar injection for all namespaces.

Default value: false

Specifies whether automatic sidecar injection can be enabled by using annotations. Valid values:

• true: specifies that automatic sidecar injection can be enabled by using annotations.
• false: specifies that automatic sidecar injection cannot be enabled by using annotations.

Default value: false

The number of CPU cores that are requested by the sidecar injector pod.

The size of the memory that is requested by the sidecar injector pod.

The maximum number of CPU cores that are available to the sidecar injector pod.

The maximum size of the memory that is available to the sidecar injector pod.

Other configurations of automatic sidecar injection, in the YAML format.

Specifies whether to enable the Container Network Interface (CNI) plug-in. Valid values:

• true: enables the CNI plug-in.
• false: disables the CNI plug-in.

Default value: false

The namespaces to be excluded for the CNI plug-in.

Specifies whether to enable the OPA plug-in. Valid values:

• true: enables the OPA plug-in.
• false: disables the OPA plug-in.

Default value: false

Specifies whether to enable the support for HTTP 1.0. Valid values:

• true: enables the support for HTTP 1.0.
• false: disables the support for HTTP 1.0.

Default value: false

Specifies whether to enable Kiali. To enable this feature, make sure that you have enabled Prometheus monitoring. If Prometheus monitoring is disabled, the value of this parameter must be false. Valid values:

• true: enables Kiali.
• false: disables Kiali.

Default value: false

Specifies whether to use a custom Prometheus instance. Valid values:

• true: uses a custom Prometheus instance.
• false: does not use a custom Prometheus instance.

Default value: false

The endpoint of Prometheus monitoring. If you use ARMS Prometheus, set this parameter to the endpoint of ARMS.

Specifies whether to enable access log collection. Valid values:

• true: enables access log collection.
• false: disables access log collection.

Default value: false

Specifies whether to enable Microservice Engine (MSE). Valid values:

• true: enables MSE.
• false: disables MSE.

Default value: false

Specifies whether to enable Redis Filter. Valid values:

• true: enables Redis Filter.
• false: disables Redis Filter.

Default value: false

Specifies whether to enable MySQL Filter. Valid values:

• true: enables MySQL Filter.
• false: disables MySQL Filter.

Default value: false

Specifies whether to enable Thrift Filter. Valid values:

• true: enables Thrift Filter.
• false: disables Thrift Filter.

Default value: false

Specifies whether to enable WebAssembly Filter. Valid values:

• true: enables WebAssembly Filter.
• false: disables WebAssembly Filter.

Default value: false

Specifies whether to enable DNS Proxying. Valid values:

• true: enables DNS Proxying.
• false: disables DNS Proxying.

Default value: false

Specifies whether to enable Dubbo Filter. Valid values:

• true: enables Dubbo Filter.
• false: disables Dubbo Filter.

Default value: false

Specifies whether to enable gateway configuration filtering. Valid values:

• true: enables gateway configuration filtering.
• false: disables gateway configuration filtering.

Default value: false

Specifies whether to enable Secret Discovery Service (SDS). Valid values:

• true: enables SDS.
• false: disables SDS.

Default value: false

Specifies whether to enable gRPC Access Log Service (ALS) for Envoy. Valid values:

• true: enables gRPC ALS.
• false: disables gRPC ALS.

Default value: false

The endpoint of gRPC ALS for Envoy.

The port of gRPC ALS for Envoy.

Specifies whether to enable Gateway API. Valid values:

• true: enables Gateway API.
• false: disables Gateway API.

Default value: false

Specifies whether to enable service registry. Valid values:

• true: enables service registry.
• false: disables service registry.

Default value: false

The instance ID of the Nacos registry.

The custom format of access logs. To set this parameter, you must enable access log collection. Otherwise, you cannot set this parameter. The value must be a JSON string. The following key values must be contained: authority_for, bytes_received, bytes_sent, downstream_local_address, downstream_remote_address, duration, istio_policy_status, method, path, protocol, requested_server_name, response_code, response_flags, route_name, start_time, trace_id, upstream_cluster, upstream_host, upstream_local_address, upstream_service_time, upstream_transport_failure_reason, user_agent, and x_forwarded_for.

Specifies whether to enable access logging. Valid values:

• "": disables access logging.
• /dev/stdout: enables access logging. /dev/stdout indicates the file address for the access log.

The custom project on which the Log Service collects logs.

Specifies whether to enable the rollback feature for Istio resources.

Specifies whether to use the Kubernetes API of clusters on the data plane to access Istio resources. The version of the ASM instance must be v1.9.7.93-g7910a454-aliyun or later.

The maximum period of time that Istio Proxy waits for a request to end.

The maximum number of CPU cores that are available to the istio-init container.

The maximum size of the memory that is available to the istio-init container.

The number of CPU cores that are required by the istio-init container.

The size of the memory that is required by the istio-init container.

The lifecycle of Istio Proxy.

Enables Transport Layer Security (TLS) acceleration based on MultiBuffer.

The pull-request latency. By default, this parameter is left empty.

The label selectors used to specify the namespaces of the clusters on the data plane for selective service discovery.

The ID of the request.