All Products
Search
Document Center

Alibaba Cloud Service Mesh:DescribeServiceMeshDetail

Last Updated:Aug 25, 2025

Call DescribeServiceMeshDetail to retrieve the details of a service mesh.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

servicemesh:DescribeServiceMeshDetail

get

*All Resource

*

None None

Request parameters

Parameter

Type

Required

Description

Example

ServiceMeshId

string

Yes

The ID of the Service Mesh instance.

c08ba3fd1e6484b0f8cc1ad8fe10d****

Response elements

Element

Type

Description

Example

object

RequestId

string

The request ID.

11fd0027-c27e-41bb-a565-75583054****

ServiceMesh

object

The details of the service mesh.

Endpoints

object

The endpoint details.

IntranetPilotEndpoint

string

The internal endpoint of Istio Pilot.

192.168.**.**:15011

PublicPilotEndpoint

string

The public endpoint of Istio Pilot.

182.92.**.**:15011

IntranetApiServerEndpoint

string

The internal endpoint of the API server.

https://192.168.**.**:6443

PublicApiServerEndpoint

string

The public endpoint of the API server.

https://123.56.**.**:6443

IntranetCanaryPilotEndpoint

string

The internal endpoint of the canary version of Istio Pilot.

192.168.**.**:15011

PublicCanaryPilotEndpoint

string

The public endpoint of the canary version of Istio Pilot.

182.92.**.**:15011

ServiceMeshInfo

object

The basic information about the service mesh.

Profile

string

The edition of the mesh. Valid values:

  • Default: Standard Edition.

  • Pro: ASM Commercial Edition (Professional Edition).

Default

CreationTime

string

The time when the service mesh was created.

2020-04-21T09:42:20+08:00

UpdateTime

string

The time when the service mesh was last modified.

2020-06-03T14:48:54+08:00

ErrorMessage

string

The error message.

error

Version

string

The version number of the service mesh.

v1.7.4.0-gfb34ba99-aliyun

State

string

The status of the service mesh.

running

ServiceMeshId

string

The ID of the Service Mesh instance.

c08ba3fd1e6484b0f8cc1ad8fe10d****

Name

string

The name of the service mesh.

mesh1

RegionId

string

The ID of the region where the service mesh resides.

cn-beijing

Spec

object

The specifications of the service mesh.

Network

object

The network configurations of the service mesh.

VpcId

string

The virtual private cloud (VPC) ID.

vpc-2zew0rajjkmxy2369****

SecurityGroupId

string

The security group ID.

sg-2ze384sxttxbctnj****

VSwitches

array

The virtual switches.

string

The virtual switch ID.

vsw-2ze66z3ntvsej0mdo****

LoadBalancer

object

The load balancing information.

PilotPublicLoadbalancerId

string

The ID of the Server Load Balancer (SLB) instance that is used to expose Istio Pilot to the Internet.

lb-2zesa8qs8kbkj9jkl****

PilotPublicEip

boolean

Indicates whether Istio Pilot is exposed to the Internet. Valid values:

  • true: Istio Pilot is exposed to the Internet.

  • false: Istio Pilot is not exposed to the Internet.

true

PilotPublicEipId

string

The public IP address ID of Istio Pilot.

eip-wz9gtwau6b2aklgjk****

CanaryPilotPublicEipId

string

The public IP address ID of the canary version of Istio Pilot.

eip-wz9gtwau6b2aklgjk****

ApiServerLoadbalancerId

string

The ID of the SLB instance that is used to expose the API server to the Internet.

lb-2zekaak10uxds44vx****

ApiServerPublicEip

boolean

Indicates whether the API server is exposed to the Internet. Valid values:

  • true: The API server is exposed to the Internet.

  • false: The API server is not exposed to the Internet.

true

ApiServerPublicEipId

string

The public IP address ID of the API server.

eip-wz9gtwau6b2aklgjk****

CanaryPilotLoadBalancerId

string

The ID of the SLB instance for the canary version of Istio Pilot.

lb-2zesa8qs8kbkj9jkl****

MeshConfig

object

The configurations of the service mesh.

OPA

object

The information about the Open Policy Agent (OPA) plug-in.

RequestMemory

string

The memory resource requested by the OPA proxy container.

1024Mi

LogLevel

string

The log level of the OPA proxy container.

info

Enabled

boolean

Indicates whether the OPA plug-in is integrated. Valid values:

  • true: The OPA plug-in is integrated.

  • false: The OPA plug-in is not integrated.

true

LimitMemory

string

The memory resource limit for the OPA proxy container.

512Mi

RequestCPU

string

The CPU resource requested by the OPA proxy container.

2

LimitCPU

string

The CPU resource limit for the OPA proxy container.

1

Prometheus

object

The Prometheus configurations.

UseExternal

boolean

Indicates whether to use an external Prometheus instance. Valid values:

  • true: Use an external Prometheus instance.

  • false: Do not use an external Prometheus instance.

false

ExternalUrl

string

The endpoint of the Prometheus service. This parameter is automatically populated when you use an external Prometheus instance.

http://prometheus:9090

AccessLog

object

The access log configurations.

Enabled

boolean

Indicates whether to enable access log. Valid values:

  • true: Enable access log.

  • false: Disable access log.

true

Project

string

The name of the access log project.

k8s-log-b7b05d08670e41ca8c8fc0b7718f*****

Pilot

object

The Pilot configurations.

Http10Enabled

boolean

Indicates whether HTTP 1.0 is supported. Valid values:

  • true: HTTP 1.0 is supported.

  • false: HTTP 1.0 is not supported.

false

TraceSampling

number

The sampling percentage of Tracing Analysis.

100

Feature

object

The Pilot feature configurations.

FilterGatewayClusterConfig

boolean

Indicates whether to filter gateway configurations. Valid values:

  • true: Filter gateway configurations.

  • false: Do not filter gateway configurations.

false

EnableSDSServer

boolean

Indicates whether to enable the Secret Discovery Service (SDS). Valid values:

  • true: Enable SDS.

  • false: Disable SDS.

false

ConfigSource

object

The configurations for accessing external services.

Enabled

boolean

Indicates whether to access external services. Valid values:

  • true: Access external services.

  • false: Do not access external services.

false

NacosID

string

The ID of the Nacos instance that provides external service information.

mse-cn-tl326******

MSE

object

The MSE configurations.

Enabled

boolean

Indicates whether to enable MSE. Valid values:

  • true: Enable MSE.

  • false: Disable MSE.

false

CustomizedZipkin

boolean

Indicates whether to enable custom Zipkin. Valid values:

  • true: Enable custom Zipkin.

  • false: Disable custom Zipkin.

false

SidecarInjector

object

The configurations of the sidecar injector.

EnableNamespacesByDefault

boolean

Indicates whether to enable automatic sidecar injection for all namespaces. Valid values:

  • true: Enable automatic sidecar injection for all namespaces.

  • false: Disable automatic sidecar injection for all namespaces.

false

RequestMemory

string

The memory resource requested by the sidecar injector pod.

512Mi

LimitMemory

string

The memory resource limit for the sidecar injector pod.

2048Mi

RequestCPU

string

The CPU resource requested by the sidecar injector pod.

1000m

AutoInjectionPolicyEnabled

boolean

Indicates whether to enable automatic sidecar injection using pod annotations. Valid values:

  • true: Enable automatic sidecar injection using pod annotations.

  • false: Disable automatic sidecar injection using pod annotations.

true

LimitCPU

string

The CPU resource limit for the sidecar injector pod.

4000m

InitCNIConfiguration

object

The CNI configurations.

ExcludeNamespaces

string

The excluded namespaces.

kube-system,istio-system

Enabled

boolean

Indicates whether to enable CNI. Valid values:

  • true: Enable CNI.

  • false: Disable CNI.

false

SidecarInjectorWebhookAsYaml

string

Other configurations for automatic sidecar injection, in YAML format. For more information, see Enable automatic sidecar injection using flexible methods.

{"injectedAnnotations":{"test/istio-init":"runtime/default2","test/istio-proxy":"runtime/default"},"replicaCount":2,"nodeSelector":{"beta.kubernetes.io/os":"linux"}}

SidecarInjectorNum

integer

The number of replicas of the component that is responsible for sidecar injection. Default value: 1.

1

IncludeIPRanges

string

The IP address ranges that are included.

192.168.0.0/16

ExcludeIPRanges

string

The IP address ranges that are not intercepted.

172.16.0.0

ExcludeOutboundPorts

string

The outbound ports that are not intercepted.

80,81

ExcludeInboundPorts

string

The inbound ports that are not intercepted.

80,81

Telemetry

boolean

Indicates whether to collect Prometheus monitoring metrics. We recommend that you use Managed Service for Prometheus. Valid values:

  • true: Collect Prometheus monitoring metrics.

  • false: Do not collect Prometheus monitoring metrics.

true

Edition

object

The version information.

Name

string

The version name.

Pro

IstiodImageTag

string

The image version of Istiod.

v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun

ProxyImageTag

string

The image version of Istio Proxy.

v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun

ProtocolSupport

object

The protocol support configurations.

MysqlFilterEnabled

boolean

Indicates whether to enable MysqlFilter. Valid values:

  • true: Enable MysqlFilter.

  • false: Disable MysqlFilter.

false

RedisFilterEnabled

boolean

Indicates whether to enable RedisFilter. Valid values:

  • true: Enable RedisFilter.

  • false: Disable RedisFilter.

false

ThriftFilterEnabled

boolean

Indicates whether to enable ThriftFilter. Valid values:

  • true: Enable ThriftFilter.

  • false: Disable ThriftFilter.

false

DubboFilterEnabled

boolean

Indicates whether to enable DubboFilter. Valid values:

  • true: Enable DubboFilter.

  • false: Disable DubboFilter.

false

OutboundTrafficPolicy

string

The outbound traffic policy. Valid values:

  • ALLOW_ANY: Allow access to all external services.

  • REGISTRY_ONLY: Only allow access to services that are registered in the mesh.

ALLOW_ANY

Kiali

object

The mesh topology configurations.

Enabled

boolean

Indicates whether to enable the mesh topology. You must first enable the collection of Prometheus monitoring metrics. If this parameter is set to false, the value of this parameter is automatically set to false. Valid values:

  • true: Enable the mesh topology.

  • false: Disable the mesh topology.

false

Url

string

The endpoint of the mesh topology service.

http://1.2.**.**:20001

Tracing

boolean

Indicates whether to enable Tracing Analysis. You must activate Managed Service for OpenTelemetry. Valid values:

  • true: Enable Tracing Analysis.

  • false: Disable Tracing Analysis.

true

WebAssemblyFilterDeployment

object

The WebAssemblyFilter configuration.

Enabled

boolean

Indicates whether WebAssemblyFilter is enabled. Valid values:

  • true: WebAssemblyFilter is enabled.

  • false: WebAssemblyFilter is not enabled.

false

EnableLocalityLB

boolean

Specifies whether to enable locality-based load balancing. Valid values:

  • true: Locality-based load balancing is enabled.

  • false: Locality-based load balancing is disabled.

true

Audit

object

The audit information for the Service Mesh.

Enabled

boolean

Indicates whether mesh audit is enabled. Valid values:

  • true: Mesh audit is enabled.

  • false: Mesh audit is disabled.

true

Project

string

The log project for the mesh audit.

audit-project

AuditProjectStatus

string

The status of the Service Mesh audit project. Valid values:

  • audit_project_exist: The audit project exists.

  • audit_project_not_exist: The audit project does not exist.

audit_project_not_exist

Proxy

object

The proxy configuration.

RequestMemory

string

The requested memory resource.

128Mi

ClusterDomain

string

The trust domain.

cluster.domain

LimitMemory

string

The memory limit.

1024Mi

RequestCPU

string

The requested CPU resource.

100m

EnableDNSProxying

boolean

Specifies whether DNS Proxying is enabled. Valid values:

  • true: DNS Proxying is enabled.

  • false: DNS Proxying is disabled.

false

LimitCPU

string

The CPU resource limit.

2000m

AccessLogServiceEnabled

boolean

Specifies whether to enable the gRPC Access Log Service (ALS) for Envoy. Valid values:

  • true: Enables the service.

  • false: Disables the service.

false

AccessLogServiceHost

string

The address of the gRPC Access Log Service (ALS) for Envoy.

0.0.0.0

AccessLogServicePort

integer

The port for the Envoy gRPC Access Log Service (ALS).

9999

AccessLogFormat

string

The format of the sidecar access log.

{"authority_for":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"}

AccessLogFile

string

The path to the sidecar access log file.

/dev/stdout

K8sNewAPIsSupport

object

Kubernetes API support.

GatewayAPIEnabled

boolean

Specifies whether to enable Gateway API. Valid values:

  • true: Gateway API is enabled.

  • false: Gateway API is disabled.

false

LocalityLB

object

The configuration for cross-region load balancing.

Enabled

boolean

Specifies whether to enable cross-region load balancing.

  • true: Enables cross-region load balancing.

  • false: Disables cross-region load balancing.

false

Failover

object

The cross-region failover configuration.

Note

This parameter is mutually exclusive with Distribute. For example, if you configure Failover, you cannot configure Distribute.

{"failover":[{"from":"cn-hangzhou","to":"cn-shanghai"}]}

Distribute

object

The configuration for distributing traffic across regions.

Note

You can configure either Distribute or Failover, but not both.

[{"from":"cn-shanghai","to":{"cn-hangzhou/*":50,"cn-shanghai/*":25,"cn-zhangjiakou/*":25}},{"from":"cn-hangzhou","to":{"cn-hangzhou/*":50,"cn-shanghai/*":25,"cn-zhangjiakou/*":25}}]

FailoverPriority

object

The list of failover priorities for locality load balancing.

["topology.istio.io/network","topology.kubernetes.io/region","topology.kubernetes.io/zone","topology.istio.io/subzone"]

ControlPlaneLogInfo

object

The collection configuration for control plane logs.

Enabled

boolean

Indicates whether log collection for the control plane is enabled. Valid values:

  • true: Enabled.

  • false: Disabled.

false

Project

string

The name of the SLS Project for control plane log collection.

mesh-log-cbeb85a09161b4a26ab73e0ac****

LogTTL

integer

The retention period for control plane logs, in days.

30

ExtraConfiguration

object

The feature enhancement configuration for the Service Mesh.

IstioCRHistory

object

The settings for the Istio resource version history feature.

EnableHistory

boolean

Specifies whether to enable the version history feature for Istio resources in ASM. Valid values:

  • true: The feature is enabled.

  • false: The feature is not enabled.

false

CRAggregationEnabled

boolean

Indicates whether to enable access to Istio resources from the Kubernetes API of a data plane cluster. Valid values:

  • true: Enables this access.

  • false: Disables this access.

false

MultiBuffer

object

MultiBuffer-based TLS performance optimization.

Enabled

boolean

Specifies whether to enable MultiBuffer-based TLS performance optimization. Valid values:

  • true: Enables MultiBuffer-based TLS performance optimization.

  • false: Does not enable MultiBuffer-based TLS performance optimization.

false

PollDelay

string

The pull latency.

0.02s

TerminationDrainDuration

string

The wait time before the Istio proxy is terminated.

5s

Lifecycle

object

The lifecycle of the Istio proxy.

postStart

object

The script to execute after the Istio Proxy starts.

exec

object

The command to execute.

command

array

An array of strings that specifies the command to execute.

string

The content of the command.

sleep 3s

httpGet

object

Executes an HTTP GET request.

port

string

The port.

80

host

string

The endpoint to call.

127.xx.xx.1

scheme

string

The request scheme. Valid values are http and https.

http

httpHeaders

array<object>

The headers to send with the network request.

object

A key-value pair for the header.

name

string

The key in the header.

key

value

string

The value of the header key.

value

tcpSocket

object

Sends a request using a TCP socket.

port

string

The TCP socket port.

888

host

string

The remote TCP socket address.

127.xx.xx.1

preStop

object

The script to execute before the Istio Proxy stops.

exec

object

The command to execute.

command

array

The command to execute. The command is an array of strings.

string

The content of the command.

sleep 3s

httpGet

object

Executes an HTTP GET request.

port

string

The port.

80

host

string

The endpoint to call.

127.xx.xx.1

scheme

string

The scheme for the call. Valid values are http and https.

http

httpHeaders

array<object>

The headers to send with the network request.

object

The key-value pair for the HTTP header.

name

string

The key in the header.

key

value

string

The value of the header.

value

tcpSocket

object

Sends a request using a TCP socket.

port

string

The port.

888

host

string

The address.

127.xx.xx.1

SidecarProxyInitResourceLimit

object

The resource limit for the istio-init init container.

ResourceCPULimit

string

The CPU resource limit for the istio-init container.

2000m

ResourceMemoryLimit

string

The memory resource limit for the istio-init container.

1024Mi

SidecarProxyInitResourceRequest

object

The resources required by the istio-init init container.

ResourceCPURequest

string

The CPU resource request for the istio-init init container.

10m

ResourceMemoryRequest

string

The memory resource required for the istio-init init container.

10Mi

DiscoverySelectors

array<object>

A list of label selectors for data plane namespaces used for selective service discovery.

object

A list of data plane namespace label selectors for selective service discovery.

[{"matchExpressions":[{"key":"asm-discovery","operator":"Exists"}]}]

OPAScopeInjection

object

Controls the scope of OPA injection.

OPAScopeInjected

boolean

Specifies whether to enable scope control for OPA injection.

  • true: Enables scope control for OPA injection.

  • false: Disables scope control for OPA injection.

false

CRAggregationConfiguration

object

The ability of the data plane to access the KubeAPI.

Enabled

boolean

Whether KubeAPI access for the data plane is enabled.

true

NFDConfiguration

object

The configuration for automatic node feature discovery.

Enabled

boolean

Indicates whether the automatic discovery of node features is enabled.

true

NFDLabelPruned

boolean

Indicates whether the feature-related labels on the nodes are purged when automatic node feature discovery is disabled.

true

AccessLogExtraConf

object

The advanced configurations for the access log feature.

GatewayLifecycle

integer

The retention period, in days, for the access logs of the ingress gateway that are collected to SLS. For example, a value of 30 specifies a 30-day retention period.

30

SidecarLifecycle

integer

The number of days to retain Sidecar access logs in SLS. For example, a value of 30 means the logs are kept for 30 days.

30

GatewayEnabled

boolean

Indicates whether gateway log collection is enabled.

true

SidecarEnabled

boolean

Indicates whether Sidecar log collection is enabled.

true

AutoDiagnosis

object

The configuration of the automatic diagnosis feature for the mesh.

AutoDiagnosisEnabled

boolean

Specifies whether to automatically diagnose the service mesh after an Istio resource is modified. If enabled, modifying any Istio resource triggers an automatic diagnosis of the service mesh after five minutes.

true

AdaptiveXdsConfiguration

object

The configuration for the adaptive configuration push optimization feature.

Enabled

boolean

Indicates whether the adaptive configuration push optimization feature is enabled.

true

EgressResources

object

Adaptive configuration push optimizes the resource configuration of the egress gateway.

Requests

object

The resource requests for the egress gateway. The adaptive configuration push feature optimizes these requests.

{"cpu":"100m", "memory": "256Mi"}

Limits

object

The resource limits for the egress gateway that are optimized by adaptive configuration push.

{"cpu":"200m", "memory": "512Mi"}

EgressReplicaCount

integer

The number of egress gateway replicas for adaptive configuration push optimization.

2

EgressAutoscaleEnabled

boolean

Indicates whether to enable auto scaling (HPA) for the egress gateway to optimize adaptive configuration push.

true

EgressMinReplica

integer

The minimum number of replicas for the egress gateway when Horizontal Pod Autoscaler (HPA) is enabled for adaptive configuration push optimization.

1

EgressMaxReplica

integer

The maximum number of replicas for the egress gateway when Horizontal Pod Autoscaler (HPA) is enabled to optimize adaptive configuration pushes.

2

EgressHpaCpu

object

Adaptive configuration push optimizes the CPU metric configuration for the egress gateway HPA.

TargetAverageUtilization

integer

The target CPU utilization for the egress gateway when you use Horizontal Pod Autoscaler (HPA) with adaptive configuration push optimization. The value must be an integer from 1 to 100. If utilization exceeds this value, the number of replicas increases. If utilization is below this value, the number of replicas decreases.

80

EgressHpaMemory

object

The memory metric configuration for the egress gateway HPA, which is used for adaptive configuration push optimization.

TargetAverageUtilization

integer

The target memory utilization for the egress gateway's Horizontal Pod Autoscaler (HPA) when adaptive configuration push is enabled. The value must be an integer from 1 to 100. If memory usage exceeds this value, the number of replicas increases. If memory usage is below this value, the number of replicas decreases.

80

IstiodExtraConfiguration

object

Additional Istiod configuration.

LabelsForOffloadedWorkloads

string

The labels for isolated workloads.

name=xx,region=xx

PilotEnableQuicListeners

boolean

Specifies whether to enable QUIC protocol listeners.

false

Playground

object

The ASM Lab configuration.

Scene

string

The ASM Lab scenario.

ewmaLb

Clusters

array

The list of clusters.

string

A list of clusters.

["caf089e56daba4c51a8906fe43ea1****","c80f45444b3da447da60a911390c2****"]

ClusterSpec

string

The instance type of the Service Mesh instance. The value can be one of the following:

  • standard: Standard Edition.

  • enterprise: Enterprise Edition.

  • ultimate: Ultimate Edition.

standard

OwnerType

string

The type of cloud product that created the mesh. Valid values:

  • ackone: The mesh was created by ACK One.

  • If this parameter is empty, the mesh was created by a user.

ackone

OwnerId

string

The ID of the cloud product instance that created the mesh.

cc3e96f249d124eb38b72718ec5*****

Examples

Success response

JSON format

{
  "RequestId": "11fd0027-c27e-41bb-a565-75583054****",
  "ServiceMesh": {
    "Endpoints": {
      "IntranetPilotEndpoint": "192.168.**.**:15011",
      "PublicPilotEndpoint": "182.92.**.**:15011",
      "IntranetApiServerEndpoint": "https://192.168.**.**:6443",
      "PublicApiServerEndpoint": "https://123.56.**.**:6443",
      "IntranetCanaryPilotEndpoint": "192.168.**.**:15011",
      "PublicCanaryPilotEndpoint": "182.92.**.**:15011"
    },
    "ServiceMeshInfo": {
      "Profile": "Default",
      "CreationTime": "2020-04-21T09:42:20+08:00",
      "UpdateTime": "2020-06-03T14:48:54+08:00",
      "ErrorMessage": " error",
      "Version": "v1.7.4.0-gfb34ba99-aliyun",
      "State": "running",
      "ServiceMeshId": "c08ba3fd1e6484b0f8cc1ad8fe10d****",
      "Name": "mesh1",
      "RegionId": "cn-beijing"
    },
    "Spec": {
      "Network": {
        "VpcId": "vpc-2zew0rajjkmxy2369****",
        "SecurityGroupId": "sg-2ze384sxttxbctnj****",
        "VSwitches": [
          "vsw-2ze66z3ntvsej0mdo****"
        ]
      },
      "LoadBalancer": {
        "PilotPublicLoadbalancerId": "lb-2zesa8qs8kbkj9jkl****",
        "PilotPublicEip": true,
        "PilotPublicEipId": "eip-wz9gtwau6b2aklgjk****",
        "CanaryPilotPublicEipId": "eip-wz9gtwau6b2aklgjk****",
        "ApiServerLoadbalancerId": "lb-2zekaak10uxds44vx****",
        "ApiServerPublicEip": true,
        "ApiServerPublicEipId": "eip-wz9gtwau6b2aklgjk****",
        "CanaryPilotLoadBalancerId": "lb-2zesa8qs8kbkj9jkl****\n"
      },
      "MeshConfig": {
        "OPA": {
          "RequestMemory": "1024Mi",
          "LogLevel": "info",
          "Enabled": true,
          "LimitMemory": "512Mi",
          "RequestCPU": "2",
          "LimitCPU": "1"
        },
        "Prometheus": {
          "UseExternal": false,
          "ExternalUrl": "http://prometheus:9090"
        },
        "AccessLog": {
          "Enabled": true,
          "Project": "k8s-log-b7b05d08670e41ca8c8fc0b7718f*****"
        },
        "Pilot": {
          "Http10Enabled": false,
          "TraceSampling": 100,
          "Feature": {
            "FilterGatewayClusterConfig": false,
            "EnableSDSServer": false
          },
          "ConfigSource": {
            "Enabled": false,
            "NacosID": "mse-cn-tl326******"
          }
        },
        "MSE": {
          "Enabled": false
        },
        "CustomizedZipkin": false,
        "SidecarInjector": {
          "EnableNamespacesByDefault": false,
          "RequestMemory": "512Mi",
          "LimitMemory": "2048Mi",
          "RequestCPU": "1000m",
          "AutoInjectionPolicyEnabled": true,
          "LimitCPU": "4000m",
          "InitCNIConfiguration": {
            "ExcludeNamespaces": "kube-system,istio-system",
            "Enabled": false
          },
          "SidecarInjectorWebhookAsYaml": "{\"injectedAnnotations\":{\"test/istio-init\":\"runtime/default2\",\"test/istio-proxy\":\"runtime/default\"},\"replicaCount\":2,\"nodeSelector\":{\"beta.kubernetes.io/os\":\"linux\"}}",
          "SidecarInjectorNum": 1
        },
        "IncludeIPRanges": "192.168.0.0/16",
        "ExcludeIPRanges": "172.16.0.0",
        "ExcludeOutboundPorts": "80,81",
        "ExcludeInboundPorts": "80,81",
        "Telemetry": true,
        "Edition": {
          "Name": "Pro",
          "IstiodImageTag": "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun",
          "ProxyImageTag": "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun"
        },
        "ProtocolSupport": {
          "MysqlFilterEnabled": false,
          "RedisFilterEnabled": false,
          "ThriftFilterEnabled": false,
          "DubboFilterEnabled": false
        },
        "OutboundTrafficPolicy": "ALLOW_ANY",
        "Kiali": {
          "Enabled": false,
          "Url": "http://1.2.**.**:20001"
        },
        "Tracing": true,
        "WebAssemblyFilterDeployment": {
          "Enabled": false
        },
        "EnableLocalityLB": true,
        "Audit": {
          "Enabled": true,
          "Project": "audit-project",
          "AuditProjectStatus": "audit_project_not_exist"
        },
        "Proxy": {
          "RequestMemory": "128Mi",
          "ClusterDomain": "cluster.domain",
          "LimitMemory": "1024Mi",
          "RequestCPU": "100m",
          "EnableDNSProxying": false,
          "LimitCPU": "2000m",
          "AccessLogServiceEnabled": false,
          "AccessLogServiceHost": "0.0.0.0",
          "AccessLogServicePort": 9999,
          "AccessLogFormat": "{\"authority_for\":\"%REQ(:AUTHORITY)%\",\"bytes_received\":\"%BYTES_RECEIVED%\",\"bytes_sent\":\"%BYTES_SENT%\",\"downstream_local_address\":\"%DOWNSTREAM_LOCAL_ADDRESS%\",\"downstream_remote_address\":\"%DOWNSTREAM_REMOTE_ADDRESS%\",\"duration\":\"%DURATION%\",\"istio_policy_status\":\"%DYNAMIC_METADATA(istio.mixer:status)%\",\"method\":\"%REQ(:METHOD)%\",\"path\":\"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%\",\"protocol\":\"%PROTOCOL%\",\"request_id\":\"%REQ(X-REQUEST-ID)%\",\"requested_server_name\":\"%REQUESTED_SERVER_NAME%\",\"response_code\":\"%RESPONSE_CODE%\",\"response_flags\":\"%RESPONSE_FLAGS%\",\"route_name\":\"%ROUTE_NAME%\",\"start_time\":\"%START_TIME%\",\"trace_id\":\"%REQ(X-B3-TRACEID)%\",\"upstream_cluster\":\"%UPSTREAM_CLUSTER%\",\"upstream_host\":\"%UPSTREAM_HOST%\",\"upstream_local_address\":\"%UPSTREAM_LOCAL_ADDRESS%\",\"upstream_service_time\":\"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%\",\"upstream_transport_failure_reason\":\"%UPSTREAM_TRANSPORT_FAILURE_REASON%\",\"user_agent\":\"%REQ(USER-AGENT)%\",\"x_forwarded_for\":\"%REQ(X-FORWARDED-FOR)%\"}",
          "AccessLogFile": "/dev/stdout"
        },
        "K8sNewAPIsSupport": {
          "GatewayAPIEnabled": false
        },
        "LocalityLB": {
          "Enabled": false,
          "Failover": {
            "failover": [
              {
                "from": "cn-hangzhou",
                "to": "cn-shanghai"
              }
            ]
          },
          "Distribute": [
            {
              "from": "cn-shanghai",
              "to": {
                "cn-hangzhou/*": 50,
                "cn-shanghai/*": 25,
                "cn-zhangjiakou/*": 25
              }
            },
            {
              "from": "cn-hangzhou",
              "to": {
                "cn-hangzhou/*": 50,
                "cn-shanghai/*": 25,
                "cn-zhangjiakou/*": 25
              }
            }
          ],
          "FailoverPriority": [
            "topology.istio.io/network",
            "topology.kubernetes.io/region",
            "topology.kubernetes.io/zone",
            "topology.istio.io/subzone"
          ]
        },
        "ControlPlaneLogInfo": {
          "Enabled": false,
          "Project": "mesh-log-cbeb85a09161b4a26ab73e0ac****",
          "LogTTL": 30
        },
        "ExtraConfiguration": {
          "IstioCRHistory": {
            "EnableHistory": false
          },
          "CRAggregationEnabled": false,
          "MultiBuffer": {
            "Enabled": false,
            "PollDelay": "0.02s"
          },
          "TerminationDrainDuration": "5s",
          "Lifecycle": {
            "postStart": {
              "exec": {
                "command": [
                  "sleep 3s"
                ]
              },
              "httpGet": {
                "port": "80",
                "host": "127.xx.xx.1",
                "scheme": "http",
                "httpHeaders": [
                  {
                    "name": "key",
                    "value": "value"
                  }
                ]
              },
              "tcpSocket": {
                "port": "888",
                "host": "127.xx.xx.1"
              }
            },
            "preStop": {
              "exec": {
                "command": [
                  "sleep 3s"
                ]
              },
              "httpGet": {
                "port": "80",
                "host": "127.xx.xx.1",
                "scheme": "http",
                "httpHeaders": [
                  {
                    "name": "key",
                    "value": "value"
                  }
                ]
              },
              "tcpSocket": {
                "port": "888",
                "host": "127.xx.xx.1"
              }
            }
          },
          "SidecarProxyInitResourceLimit": {
            "ResourceCPULimit": "2000m",
            "ResourceMemoryLimit": "1024Mi"
          },
          "SidecarProxyInitResourceRequest": {
            "ResourceCPURequest": "10m",
            "ResourceMemoryRequest": "10Mi"
          },
          "DiscoverySelectors": [
            [
              {
                "matchExpressions": [
                  {
                    "key": "asm-discovery",
                    "operator": "Exists"
                  }
                ]
              }
            ]
          ],
          "OPAScopeInjection": {
            "OPAScopeInjected": false
          },
          "CRAggregationConfiguration": {
            "Enabled": true
          },
          "NFDConfiguration": {
            "Enabled": true,
            "NFDLabelPruned": true
          },
          "AccessLogExtraConf": {
            "GatewayLifecycle": 30,
            "SidecarLifecycle": 30,
            "GatewayEnabled": true,
            "SidecarEnabled": true
          },
          "AutoDiagnosis": {
            "AutoDiagnosisEnabled": true
          },
          "AdaptiveXdsConfiguration": {
            "Enabled": true,
            "EgressResources": {
              "Requests": {
                "cpu": "100m",
                "memory": "256Mi"
              },
              "Limits": {
                "cpu": "200m",
                "memory": "512Mi"
              }
            },
            "EgressReplicaCount": 2,
            "EgressAutoscaleEnabled": true,
            "EgressMinReplica": 1,
            "EgressMaxReplica": 2,
            "EgressHpaCpu": {
              "TargetAverageUtilization": 80
            },
            "EgressHpaMemory": {
              "TargetAverageUtilization": 80
            }
          },
          "IstiodExtraConfiguration": {
            "LabelsForOffloadedWorkloads": "name=xx,region=xx",
            "PilotEnableQuicListeners": false
          },
          "Playground": {
            "Scene": "ewmaLb"
          }
        }
      }
    },
    "Clusters": [
      "[\"caf089e56daba4c51a8906fe43ea1****\",\"c80f45444b3da447da60a911390c2****\"]"
    ],
    "ClusterSpec": "standard",
    "OwnerType": "ackone",
    "OwnerId": "cc3e96f249d124eb38b72718ec5*****"
  }
}

Error codes

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.