Call DescribeServiceMeshDetail to retrieve the details of a service mesh.
Try it now
Test
RAM authorization
|
Action |
Access level |
Resource type |
Condition key |
Dependent action |
|
servicemesh:DescribeServiceMeshDetail |
get |
*All Resource
|
None | None |
Request parameters
|
Parameter |
Type |
Required |
Description |
Example |
| ServiceMeshId |
string |
Yes |
The ID of the Service Mesh instance. |
c08ba3fd1e6484b0f8cc1ad8fe10d**** |
Response elements
|
Element |
Type |
Description |
Example |
|
object |
|||
| RequestId |
string |
The request ID. |
11fd0027-c27e-41bb-a565-75583054**** |
| ServiceMesh |
object |
The details of the service mesh. |
|
| Endpoints |
object |
The endpoint details. |
|
| IntranetPilotEndpoint |
string |
The internal endpoint of Istio Pilot. |
192.168.**.**:15011 |
| PublicPilotEndpoint |
string |
The public endpoint of Istio Pilot. |
182.92.**.**:15011 |
| IntranetApiServerEndpoint |
string |
The internal endpoint of the API server. |
https://192.168.**.**:6443 |
| PublicApiServerEndpoint |
string |
The public endpoint of the API server. |
https://123.56.**.**:6443 |
| IntranetCanaryPilotEndpoint |
string |
The internal endpoint of the canary version of Istio Pilot. |
192.168.**.**:15011 |
| PublicCanaryPilotEndpoint |
string |
The public endpoint of the canary version of Istio Pilot. |
182.92.**.**:15011 |
| ServiceMeshInfo |
object |
The basic information about the service mesh. |
|
| Profile |
string |
The edition of the mesh. Valid values:
|
Default |
| CreationTime |
string |
The time when the service mesh was created. |
2020-04-21T09:42:20+08:00 |
| UpdateTime |
string |
The time when the service mesh was last modified. |
2020-06-03T14:48:54+08:00 |
| ErrorMessage |
string |
The error message. |
error |
| Version |
string |
The version number of the service mesh. |
v1.7.4.0-gfb34ba99-aliyun |
| State |
string |
The status of the service mesh. |
running |
| ServiceMeshId |
string |
The ID of the Service Mesh instance. |
c08ba3fd1e6484b0f8cc1ad8fe10d**** |
| Name |
string |
The name of the service mesh. |
mesh1 |
| RegionId |
string |
The ID of the region where the service mesh resides. |
cn-beijing |
| Spec |
object |
The specifications of the service mesh. |
|
| Network |
object |
The network configurations of the service mesh. |
|
| VpcId |
string |
The virtual private cloud (VPC) ID. |
vpc-2zew0rajjkmxy2369**** |
| SecurityGroupId |
string |
The security group ID. |
sg-2ze384sxttxbctnj**** |
| VSwitches |
array |
The virtual switches. |
|
|
string |
The virtual switch ID. |
vsw-2ze66z3ntvsej0mdo**** |
|
| LoadBalancer |
object |
The load balancing information. |
|
| PilotPublicLoadbalancerId |
string |
The ID of the Server Load Balancer (SLB) instance that is used to expose Istio Pilot to the Internet. |
lb-2zesa8qs8kbkj9jkl**** |
| PilotPublicEip |
boolean |
Indicates whether Istio Pilot is exposed to the Internet. Valid values:
|
true |
| PilotPublicEipId |
string |
The public IP address ID of Istio Pilot. |
eip-wz9gtwau6b2aklgjk**** |
| CanaryPilotPublicEipId |
string |
The public IP address ID of the canary version of Istio Pilot. |
eip-wz9gtwau6b2aklgjk**** |
| ApiServerLoadbalancerId |
string |
The ID of the SLB instance that is used to expose the API server to the Internet. |
lb-2zekaak10uxds44vx**** |
| ApiServerPublicEip |
boolean |
Indicates whether the API server is exposed to the Internet. Valid values:
|
true |
| ApiServerPublicEipId |
string |
The public IP address ID of the API server. |
eip-wz9gtwau6b2aklgjk**** |
| CanaryPilotLoadBalancerId |
string |
The ID of the SLB instance for the canary version of Istio Pilot. |
lb-2zesa8qs8kbkj9jkl**** |
| MeshConfig |
object |
The configurations of the service mesh. |
|
| OPA |
object |
The information about the Open Policy Agent (OPA) plug-in. |
|
| RequestMemory |
string |
The memory resource requested by the OPA proxy container. |
1024Mi |
| LogLevel |
string |
The log level of the OPA proxy container. |
info |
| Enabled |
boolean |
Indicates whether the OPA plug-in is integrated. Valid values:
|
true |
| LimitMemory |
string |
The memory resource limit for the OPA proxy container. |
512Mi |
| RequestCPU |
string |
The CPU resource requested by the OPA proxy container. |
2 |
| LimitCPU |
string |
The CPU resource limit for the OPA proxy container. |
1 |
| Prometheus |
object |
The Prometheus configurations. |
|
| UseExternal |
boolean |
Indicates whether to use an external Prometheus instance. Valid values:
|
false |
| ExternalUrl |
string |
The endpoint of the Prometheus service. This parameter is automatically populated when you use an external Prometheus instance. |
http://prometheus:9090 |
| AccessLog |
object |
The access log configurations. |
|
| Enabled |
boolean |
Indicates whether to enable access log. Valid values:
|
true |
| Project |
string |
The name of the access log project. |
k8s-log-b7b05d08670e41ca8c8fc0b7718f***** |
| Pilot |
object |
The Pilot configurations. |
|
| Http10Enabled |
boolean |
Indicates whether HTTP 1.0 is supported. Valid values:
|
false |
| TraceSampling |
number |
The sampling percentage of Tracing Analysis. |
100 |
| Feature |
object |
The Pilot feature configurations. |
|
| FilterGatewayClusterConfig |
boolean |
Indicates whether to filter gateway configurations. Valid values:
|
false |
| EnableSDSServer |
boolean |
Indicates whether to enable the Secret Discovery Service (SDS). Valid values:
|
false |
| ConfigSource |
object |
The configurations for accessing external services. |
|
| Enabled |
boolean |
Indicates whether to access external services. Valid values:
|
false |
| NacosID |
string |
The ID of the Nacos instance that provides external service information. |
mse-cn-tl326****** |
| MSE |
object |
The MSE configurations. |
|
| Enabled |
boolean |
Indicates whether to enable MSE. Valid values:
|
false |
| CustomizedZipkin |
boolean |
Indicates whether to enable custom Zipkin. Valid values:
|
false |
| SidecarInjector |
object |
The configurations of the sidecar injector. |
|
| EnableNamespacesByDefault |
boolean |
Indicates whether to enable automatic sidecar injection for all namespaces. Valid values:
|
false |
| RequestMemory |
string |
The memory resource requested by the sidecar injector pod. |
512Mi |
| LimitMemory |
string |
The memory resource limit for the sidecar injector pod. |
2048Mi |
| RequestCPU |
string |
The CPU resource requested by the sidecar injector pod. |
1000m |
| AutoInjectionPolicyEnabled |
boolean |
Indicates whether to enable automatic sidecar injection using pod annotations. Valid values:
|
true |
| LimitCPU |
string |
The CPU resource limit for the sidecar injector pod. |
4000m |
| InitCNIConfiguration |
object |
The CNI configurations. |
|
| ExcludeNamespaces |
string |
The excluded namespaces. |
kube-system,istio-system |
| Enabled |
boolean |
Indicates whether to enable CNI. Valid values:
|
false |
| SidecarInjectorWebhookAsYaml |
string |
Other configurations for automatic sidecar injection, in YAML format. For more information, see Enable automatic sidecar injection using flexible methods. |
{"injectedAnnotations":{"test/istio-init":"runtime/default2","test/istio-proxy":"runtime/default"},"replicaCount":2,"nodeSelector":{"beta.kubernetes.io/os":"linux"}} |
| SidecarInjectorNum |
integer |
The number of replicas of the component that is responsible for sidecar injection. Default value: |
1 |
| IncludeIPRanges |
string |
The IP address ranges that are included. |
192.168.0.0/16 |
| ExcludeIPRanges |
string |
The IP address ranges that are not intercepted. |
172.16.0.0 |
| ExcludeOutboundPorts |
string |
The outbound ports that are not intercepted. |
80,81 |
| ExcludeInboundPorts |
string |
The inbound ports that are not intercepted. |
80,81 |
| Telemetry |
boolean |
Indicates whether to collect Prometheus monitoring metrics. We recommend that you use Managed Service for Prometheus. Valid values:
|
true |
| Edition |
object |
The version information. |
|
| Name |
string |
The version name. |
Pro |
| IstiodImageTag |
string |
The image version of Istiod. |
v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun |
| ProxyImageTag |
string |
The image version of Istio Proxy. |
v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun |
| ProtocolSupport |
object |
The protocol support configurations. |
|
| MysqlFilterEnabled |
boolean |
Indicates whether to enable MysqlFilter. Valid values:
|
false |
| RedisFilterEnabled |
boolean |
Indicates whether to enable RedisFilter. Valid values:
|
false |
| ThriftFilterEnabled |
boolean |
Indicates whether to enable ThriftFilter. Valid values:
|
false |
| DubboFilterEnabled |
boolean |
Indicates whether to enable DubboFilter. Valid values:
|
false |
| OutboundTrafficPolicy |
string |
The outbound traffic policy. Valid values:
|
ALLOW_ANY |
| Kiali |
object |
The mesh topology configurations. |
|
| Enabled |
boolean |
Indicates whether to enable the mesh topology. You must first enable the collection of Prometheus monitoring metrics. If this parameter is set to
|
false |
| Url |
string |
The endpoint of the mesh topology service. |
http://1.2.**.**:20001 |
| Tracing |
boolean |
Indicates whether to enable Tracing Analysis. You must activate Managed Service for OpenTelemetry. Valid values:
|
true |
| WebAssemblyFilterDeployment |
object |
The WebAssemblyFilter configuration. |
|
| Enabled |
boolean |
Indicates whether WebAssemblyFilter is enabled. Valid values:
|
false |
| EnableLocalityLB |
boolean |
Specifies whether to enable locality-based load balancing. Valid values:
|
true |
| Audit |
object |
The audit information for the Service Mesh. |
|
| Enabled |
boolean |
Indicates whether mesh audit is enabled. Valid values:
|
true |
| Project |
string |
The log project for the mesh audit. |
audit-project |
| AuditProjectStatus |
string |
The status of the Service Mesh audit project. Valid values:
|
audit_project_not_exist |
| Proxy |
object |
The proxy configuration. |
|
| RequestMemory |
string |
The requested memory resource. |
128Mi |
| ClusterDomain |
string |
The trust domain. |
cluster.domain |
| LimitMemory |
string |
The memory limit. |
1024Mi |
| RequestCPU |
string |
The requested CPU resource. |
100m |
| EnableDNSProxying |
boolean |
Specifies whether DNS Proxying is enabled. Valid values:
|
false |
| LimitCPU |
string |
The CPU resource limit. |
2000m |
| AccessLogServiceEnabled |
boolean |
Specifies whether to enable the gRPC Access Log Service (ALS) for Envoy. Valid values:
|
false |
| AccessLogServiceHost |
string |
The address of the gRPC Access Log Service (ALS) for Envoy. |
0.0.0.0 |
| AccessLogServicePort |
integer |
The port for the Envoy gRPC Access Log Service (ALS). |
9999 |
| AccessLogFormat |
string |
The format of the sidecar access log. |
{"authority_for":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"} |
| AccessLogFile |
string |
The path to the sidecar access log file. |
/dev/stdout |
| K8sNewAPIsSupport |
object |
Kubernetes API support. |
|
| GatewayAPIEnabled |
boolean |
Specifies whether to enable Gateway API. Valid values:
|
false |
| LocalityLB |
object |
The configuration for cross-region load balancing. |
|
| Enabled |
boolean |
Specifies whether to enable cross-region load balancing.
|
false |
| Failover |
object |
The cross-region failover configuration. Note
This parameter is mutually exclusive with |
{"failover":[{"from":"cn-hangzhou","to":"cn-shanghai"}]} |
| Distribute |
object |
The configuration for distributing traffic across regions. Note
You can configure either |
[{"from":"cn-shanghai","to":{"cn-hangzhou/*":50,"cn-shanghai/*":25,"cn-zhangjiakou/*":25}},{"from":"cn-hangzhou","to":{"cn-hangzhou/*":50,"cn-shanghai/*":25,"cn-zhangjiakou/*":25}}] |
| FailoverPriority |
object |
The list of failover priorities for locality load balancing. |
["topology.istio.io/network","topology.kubernetes.io/region","topology.kubernetes.io/zone","topology.istio.io/subzone"] |
| ControlPlaneLogInfo |
object |
The collection configuration for control plane logs. |
|
| Enabled |
boolean |
Indicates whether log collection for the control plane is enabled. Valid values:
|
false |
| Project |
string |
The name of the SLS Project for control plane log collection. |
mesh-log-cbeb85a09161b4a26ab73e0ac**** |
| LogTTL |
integer |
The retention period for control plane logs, in days. |
30 |
| ExtraConfiguration |
object |
The feature enhancement configuration for the Service Mesh. |
|
| IstioCRHistory |
object |
The settings for the Istio resource version history feature. |
|
| EnableHistory |
boolean |
Specifies whether to enable the version history feature for Istio resources in ASM. Valid values:
|
false |
| CRAggregationEnabled |
boolean |
Indicates whether to enable access to Istio resources from the Kubernetes API of a data plane cluster. Valid values:
|
false |
| MultiBuffer |
object |
MultiBuffer-based TLS performance optimization. |
|
| Enabled |
boolean |
Specifies whether to enable MultiBuffer-based TLS performance optimization. Valid values:
|
false |
| PollDelay |
string |
The pull latency. |
0.02s |
| TerminationDrainDuration |
string |
The wait time before the Istio proxy is terminated. |
5s |
| Lifecycle |
object |
The lifecycle of the Istio proxy. |
|
| postStart |
object |
The script to execute after the Istio Proxy starts. |
|
| exec |
object |
The command to execute. |
|
| command |
array |
An array of strings that specifies the command to execute. |
|
|
string |
The content of the command. |
sleep 3s |
|
| httpGet |
object |
Executes an HTTP GET request. |
|
| port |
string |
The port. |
80 |
| host |
string |
The endpoint to call. |
127.xx.xx.1 |
| scheme |
string |
The request scheme. Valid values are |
http |
| httpHeaders |
array<object> |
The headers to send with the network request. |
|
|
object |
A key-value pair for the header. |
||
| name |
string |
The key in the header. |
key |
| value |
string |
The value of the header key. |
value |
| tcpSocket |
object |
Sends a request using a TCP socket. |
|
| port |
string |
The TCP socket port. |
888 |
| host |
string |
The remote TCP socket address. |
127.xx.xx.1 |
| preStop |
object |
The script to execute before the Istio Proxy stops. |
|
| exec |
object |
The command to execute. |
|
| command |
array |
The command to execute. The command is an array of strings. |
|
|
string |
The content of the command. |
sleep 3s |
|
| httpGet |
object |
Executes an HTTP GET request. |
|
| port |
string |
The port. |
80 |
| host |
string |
The endpoint to call. |
127.xx.xx.1 |
| scheme |
string |
The scheme for the call. Valid values are |
http |
| httpHeaders |
array<object> |
The headers to send with the network request. |
|
|
object |
The key-value pair for the HTTP header. |
||
| name |
string |
The key in the header. |
key |
| value |
string |
The value of the header. |
value |
| tcpSocket |
object |
Sends a request using a TCP socket. |
|
| port |
string |
The port. |
888 |
| host |
string |
The address. |
127.xx.xx.1 |
| SidecarProxyInitResourceLimit |
object |
The resource limit for the istio-init init container. |
|
| ResourceCPULimit |
string |
The CPU resource limit for the istio-init container. |
2000m |
| ResourceMemoryLimit |
string |
The memory resource limit for the istio-init container. |
1024Mi |
| SidecarProxyInitResourceRequest |
object |
The resources required by the istio-init init container. |
|
| ResourceCPURequest |
string |
The CPU resource request for the istio-init init container. |
10m |
| ResourceMemoryRequest |
string |
The memory resource required for the istio-init init container. |
10Mi |
| DiscoverySelectors |
array<object> |
A list of label selectors for data plane namespaces used for selective service discovery. |
|
|
object |
A list of data plane namespace label selectors for selective service discovery. |
[{"matchExpressions":[{"key":"asm-discovery","operator":"Exists"}]}] |
|
| OPAScopeInjection |
object |
Controls the scope of OPA injection. |
|
| OPAScopeInjected |
boolean |
Specifies whether to enable scope control for OPA injection.
|
false |
| CRAggregationConfiguration |
object |
The ability of the data plane to access the KubeAPI. |
|
| Enabled |
boolean |
Whether KubeAPI access for the data plane is enabled. |
true |
| NFDConfiguration |
object |
The configuration for automatic node feature discovery. |
|
| Enabled |
boolean |
Indicates whether the automatic discovery of node features is enabled. |
true |
| NFDLabelPruned |
boolean |
Indicates whether the feature-related labels on the nodes are purged when automatic node feature discovery is disabled. |
true |
| AccessLogExtraConf |
object |
The advanced configurations for the access log feature. |
|
| GatewayLifecycle |
integer |
The retention period, in days, for the access logs of the ingress gateway that are collected to SLS. For example, a value of 30 specifies a 30-day retention period. |
30 |
| SidecarLifecycle |
integer |
The number of days to retain Sidecar access logs in SLS. For example, a value of 30 means the logs are kept for 30 days. |
30 |
| GatewayEnabled |
boolean |
Indicates whether gateway log collection is enabled. |
true |
| SidecarEnabled |
boolean |
Indicates whether Sidecar log collection is enabled. |
true |
| AutoDiagnosis |
object |
The configuration of the automatic diagnosis feature for the mesh. |
|
| AutoDiagnosisEnabled |
boolean |
Specifies whether to automatically diagnose the service mesh after an Istio resource is modified. If enabled, modifying any Istio resource triggers an automatic diagnosis of the service mesh after five minutes. |
true |
| AdaptiveXdsConfiguration |
object |
The configuration for the adaptive configuration push optimization feature. |
|
| Enabled |
boolean |
Indicates whether the adaptive configuration push optimization feature is enabled. |
true |
| EgressResources |
object |
Adaptive configuration push optimizes the resource configuration of the egress gateway. |
|
| Requests |
object |
The resource requests for the egress gateway. The adaptive configuration push feature optimizes these requests. |
{"cpu":"100m", "memory": "256Mi"} |
| Limits |
object |
The resource limits for the egress gateway that are optimized by adaptive configuration push. |
{"cpu":"200m", "memory": "512Mi"} |
| EgressReplicaCount |
integer |
The number of egress gateway replicas for adaptive configuration push optimization. |
2 |
| EgressAutoscaleEnabled |
boolean |
Indicates whether to enable auto scaling (HPA) for the egress gateway to optimize adaptive configuration push. |
true |
| EgressMinReplica |
integer |
The minimum number of replicas for the egress gateway when Horizontal Pod Autoscaler (HPA) is enabled for adaptive configuration push optimization. |
1 |
| EgressMaxReplica |
integer |
The maximum number of replicas for the egress gateway when Horizontal Pod Autoscaler (HPA) is enabled to optimize adaptive configuration pushes. |
2 |
| EgressHpaCpu |
object |
Adaptive configuration push optimizes the CPU metric configuration for the egress gateway HPA. |
|
| TargetAverageUtilization |
integer |
The target CPU utilization for the egress gateway when you use Horizontal Pod Autoscaler (HPA) with adaptive configuration push optimization. The value must be an integer from 1 to 100. If utilization exceeds this value, the number of replicas increases. If utilization is below this value, the number of replicas decreases. |
80 |
| EgressHpaMemory |
object |
The memory metric configuration for the egress gateway HPA, which is used for adaptive configuration push optimization. |
|
| TargetAverageUtilization |
integer |
The target memory utilization for the egress gateway's Horizontal Pod Autoscaler (HPA) when adaptive configuration push is enabled. The value must be an integer from 1 to 100. If memory usage exceeds this value, the number of replicas increases. If memory usage is below this value, the number of replicas decreases. |
80 |
| IstiodExtraConfiguration |
object |
Additional Istiod configuration. |
|
| LabelsForOffloadedWorkloads |
string |
The labels for isolated workloads. |
name=xx,region=xx |
| PilotEnableQuicListeners |
boolean |
Specifies whether to enable QUIC protocol listeners. |
false |
| Playground |
object |
The ASM Lab configuration. |
|
| Scene |
string |
The ASM Lab scenario. |
ewmaLb |
| Clusters |
array |
The list of clusters. |
|
|
string |
A list of clusters. |
["caf089e56daba4c51a8906fe43ea1****","c80f45444b3da447da60a911390c2****"] |
|
| ClusterSpec |
string |
The instance type of the Service Mesh instance. The value can be one of the following:
|
standard |
| OwnerType |
string |
The type of cloud product that created the mesh. Valid values:
|
ackone |
| OwnerId |
string |
The ID of the cloud product instance that created the mesh. |
cc3e96f249d124eb38b72718ec5***** |
Examples
Success response
JSON format
{
"RequestId": "11fd0027-c27e-41bb-a565-75583054****",
"ServiceMesh": {
"Endpoints": {
"IntranetPilotEndpoint": "192.168.**.**:15011",
"PublicPilotEndpoint": "182.92.**.**:15011",
"IntranetApiServerEndpoint": "https://192.168.**.**:6443",
"PublicApiServerEndpoint": "https://123.56.**.**:6443",
"IntranetCanaryPilotEndpoint": "192.168.**.**:15011",
"PublicCanaryPilotEndpoint": "182.92.**.**:15011"
},
"ServiceMeshInfo": {
"Profile": "Default",
"CreationTime": "2020-04-21T09:42:20+08:00",
"UpdateTime": "2020-06-03T14:48:54+08:00",
"ErrorMessage": " error",
"Version": "v1.7.4.0-gfb34ba99-aliyun",
"State": "running",
"ServiceMeshId": "c08ba3fd1e6484b0f8cc1ad8fe10d****",
"Name": "mesh1",
"RegionId": "cn-beijing"
},
"Spec": {
"Network": {
"VpcId": "vpc-2zew0rajjkmxy2369****",
"SecurityGroupId": "sg-2ze384sxttxbctnj****",
"VSwitches": [
"vsw-2ze66z3ntvsej0mdo****"
]
},
"LoadBalancer": {
"PilotPublicLoadbalancerId": "lb-2zesa8qs8kbkj9jkl****",
"PilotPublicEip": true,
"PilotPublicEipId": "eip-wz9gtwau6b2aklgjk****",
"CanaryPilotPublicEipId": "eip-wz9gtwau6b2aklgjk****",
"ApiServerLoadbalancerId": "lb-2zekaak10uxds44vx****",
"ApiServerPublicEip": true,
"ApiServerPublicEipId": "eip-wz9gtwau6b2aklgjk****",
"CanaryPilotLoadBalancerId": "lb-2zesa8qs8kbkj9jkl****\n"
},
"MeshConfig": {
"OPA": {
"RequestMemory": "1024Mi",
"LogLevel": "info",
"Enabled": true,
"LimitMemory": "512Mi",
"RequestCPU": "2",
"LimitCPU": "1"
},
"Prometheus": {
"UseExternal": false,
"ExternalUrl": "http://prometheus:9090"
},
"AccessLog": {
"Enabled": true,
"Project": "k8s-log-b7b05d08670e41ca8c8fc0b7718f*****"
},
"Pilot": {
"Http10Enabled": false,
"TraceSampling": 100,
"Feature": {
"FilterGatewayClusterConfig": false,
"EnableSDSServer": false
},
"ConfigSource": {
"Enabled": false,
"NacosID": "mse-cn-tl326******"
}
},
"MSE": {
"Enabled": false
},
"CustomizedZipkin": false,
"SidecarInjector": {
"EnableNamespacesByDefault": false,
"RequestMemory": "512Mi",
"LimitMemory": "2048Mi",
"RequestCPU": "1000m",
"AutoInjectionPolicyEnabled": true,
"LimitCPU": "4000m",
"InitCNIConfiguration": {
"ExcludeNamespaces": "kube-system,istio-system",
"Enabled": false
},
"SidecarInjectorWebhookAsYaml": "{\"injectedAnnotations\":{\"test/istio-init\":\"runtime/default2\",\"test/istio-proxy\":\"runtime/default\"},\"replicaCount\":2,\"nodeSelector\":{\"beta.kubernetes.io/os\":\"linux\"}}",
"SidecarInjectorNum": 1
},
"IncludeIPRanges": "192.168.0.0/16",
"ExcludeIPRanges": "172.16.0.0",
"ExcludeOutboundPorts": "80,81",
"ExcludeInboundPorts": "80,81",
"Telemetry": true,
"Edition": {
"Name": "Pro",
"IstiodImageTag": "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun",
"ProxyImageTag": "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun"
},
"ProtocolSupport": {
"MysqlFilterEnabled": false,
"RedisFilterEnabled": false,
"ThriftFilterEnabled": false,
"DubboFilterEnabled": false
},
"OutboundTrafficPolicy": "ALLOW_ANY",
"Kiali": {
"Enabled": false,
"Url": "http://1.2.**.**:20001"
},
"Tracing": true,
"WebAssemblyFilterDeployment": {
"Enabled": false
},
"EnableLocalityLB": true,
"Audit": {
"Enabled": true,
"Project": "audit-project",
"AuditProjectStatus": "audit_project_not_exist"
},
"Proxy": {
"RequestMemory": "128Mi",
"ClusterDomain": "cluster.domain",
"LimitMemory": "1024Mi",
"RequestCPU": "100m",
"EnableDNSProxying": false,
"LimitCPU": "2000m",
"AccessLogServiceEnabled": false,
"AccessLogServiceHost": "0.0.0.0",
"AccessLogServicePort": 9999,
"AccessLogFormat": "{\"authority_for\":\"%REQ(:AUTHORITY)%\",\"bytes_received\":\"%BYTES_RECEIVED%\",\"bytes_sent\":\"%BYTES_SENT%\",\"downstream_local_address\":\"%DOWNSTREAM_LOCAL_ADDRESS%\",\"downstream_remote_address\":\"%DOWNSTREAM_REMOTE_ADDRESS%\",\"duration\":\"%DURATION%\",\"istio_policy_status\":\"%DYNAMIC_METADATA(istio.mixer:status)%\",\"method\":\"%REQ(:METHOD)%\",\"path\":\"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%\",\"protocol\":\"%PROTOCOL%\",\"request_id\":\"%REQ(X-REQUEST-ID)%\",\"requested_server_name\":\"%REQUESTED_SERVER_NAME%\",\"response_code\":\"%RESPONSE_CODE%\",\"response_flags\":\"%RESPONSE_FLAGS%\",\"route_name\":\"%ROUTE_NAME%\",\"start_time\":\"%START_TIME%\",\"trace_id\":\"%REQ(X-B3-TRACEID)%\",\"upstream_cluster\":\"%UPSTREAM_CLUSTER%\",\"upstream_host\":\"%UPSTREAM_HOST%\",\"upstream_local_address\":\"%UPSTREAM_LOCAL_ADDRESS%\",\"upstream_service_time\":\"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%\",\"upstream_transport_failure_reason\":\"%UPSTREAM_TRANSPORT_FAILURE_REASON%\",\"user_agent\":\"%REQ(USER-AGENT)%\",\"x_forwarded_for\":\"%REQ(X-FORWARDED-FOR)%\"}",
"AccessLogFile": "/dev/stdout"
},
"K8sNewAPIsSupport": {
"GatewayAPIEnabled": false
},
"LocalityLB": {
"Enabled": false,
"Failover": {
"failover": [
{
"from": "cn-hangzhou",
"to": "cn-shanghai"
}
]
},
"Distribute": [
{
"from": "cn-shanghai",
"to": {
"cn-hangzhou/*": 50,
"cn-shanghai/*": 25,
"cn-zhangjiakou/*": 25
}
},
{
"from": "cn-hangzhou",
"to": {
"cn-hangzhou/*": 50,
"cn-shanghai/*": 25,
"cn-zhangjiakou/*": 25
}
}
],
"FailoverPriority": [
"topology.istio.io/network",
"topology.kubernetes.io/region",
"topology.kubernetes.io/zone",
"topology.istio.io/subzone"
]
},
"ControlPlaneLogInfo": {
"Enabled": false,
"Project": "mesh-log-cbeb85a09161b4a26ab73e0ac****",
"LogTTL": 30
},
"ExtraConfiguration": {
"IstioCRHistory": {
"EnableHistory": false
},
"CRAggregationEnabled": false,
"MultiBuffer": {
"Enabled": false,
"PollDelay": "0.02s"
},
"TerminationDrainDuration": "5s",
"Lifecycle": {
"postStart": {
"exec": {
"command": [
"sleep 3s"
]
},
"httpGet": {
"port": "80",
"host": "127.xx.xx.1",
"scheme": "http",
"httpHeaders": [
{
"name": "key",
"value": "value"
}
]
},
"tcpSocket": {
"port": "888",
"host": "127.xx.xx.1"
}
},
"preStop": {
"exec": {
"command": [
"sleep 3s"
]
},
"httpGet": {
"port": "80",
"host": "127.xx.xx.1",
"scheme": "http",
"httpHeaders": [
{
"name": "key",
"value": "value"
}
]
},
"tcpSocket": {
"port": "888",
"host": "127.xx.xx.1"
}
}
},
"SidecarProxyInitResourceLimit": {
"ResourceCPULimit": "2000m",
"ResourceMemoryLimit": "1024Mi"
},
"SidecarProxyInitResourceRequest": {
"ResourceCPURequest": "10m",
"ResourceMemoryRequest": "10Mi"
},
"DiscoverySelectors": [
[
{
"matchExpressions": [
{
"key": "asm-discovery",
"operator": "Exists"
}
]
}
]
],
"OPAScopeInjection": {
"OPAScopeInjected": false
},
"CRAggregationConfiguration": {
"Enabled": true
},
"NFDConfiguration": {
"Enabled": true,
"NFDLabelPruned": true
},
"AccessLogExtraConf": {
"GatewayLifecycle": 30,
"SidecarLifecycle": 30,
"GatewayEnabled": true,
"SidecarEnabled": true
},
"AutoDiagnosis": {
"AutoDiagnosisEnabled": true
},
"AdaptiveXdsConfiguration": {
"Enabled": true,
"EgressResources": {
"Requests": {
"cpu": "100m",
"memory": "256Mi"
},
"Limits": {
"cpu": "200m",
"memory": "512Mi"
}
},
"EgressReplicaCount": 2,
"EgressAutoscaleEnabled": true,
"EgressMinReplica": 1,
"EgressMaxReplica": 2,
"EgressHpaCpu": {
"TargetAverageUtilization": 80
},
"EgressHpaMemory": {
"TargetAverageUtilization": 80
}
},
"IstiodExtraConfiguration": {
"LabelsForOffloadedWorkloads": "name=xx,region=xx",
"PilotEnableQuicListeners": false
},
"Playground": {
"Scene": "ewmaLb"
}
}
}
},
"Clusters": [
"[\"caf089e56daba4c51a8906fe43ea1****\",\"c80f45444b3da447da60a911390c2****\"]"
],
"ClusterSpec": "standard",
"OwnerType": "ackone",
"OwnerId": "cc3e96f249d124eb38b72718ec5*****"
}
}
Error codes
See Error Codes for a complete list.
Release notes
See Release Notes for a complete list.