Alibaba Cloud Service Mesh:UpdateMeshFeature

The ID of the service mesh.

Specifies whether to enable Tracing Analysis. To enable this feature, you must activate Managed Service for OpenTelemetry. Valid values:

• true: enables Tracing Analysis.

• false: disables Tracing Analysis.

Default value: false.

The sampling percentage for Tracing Analysis.

The custom tags for Tracing Analysis. The value must be a JSON string. The structure is as follows:

{
    "name1": CustomTag,
    "name2": CustomTag
}

The CustomTag structure can be literal, header, or environment. Select one of them.

{
    "literal": {
        "value": "static field"
    }
    "header": {
        "name": "HEADER name",
        "defaultValue": "The default value to use if the specified header does not exist."
    }
    "environment": {
        "name": "Environment variable name",
        "defaultValue": "The default value to use if the specified environment variable does not exist."
    }
}

The maximum length of the URI of the request that is contained in the `HttpUrl` span tag. Default value: 256.

Specifies whether to enable locality-based load balancing. Valid values:

• true: enables locality-based load balancing.

• false: disables locality-based load balancing.

Default value: false.

The configurations of locality-based load balancing. Valid values:

• failover: the configurations of cross-region failover. Example:

    failover: [//  struct, the configurations of cross-region failover.
        {
            // When a service in the China (Beijing) region fails, traffic is transferred to the same service in the China (Hangzhou) region.
            from: "cn-beijing", 
            to: "cn-hangzhou",
        }
    ]

• distribute: the configurations of cross-region traffic distribution. Example:

distribute: [ // struct, the configurations of cross-region traffic distribution.
        {
            // For traffic that is routed to the China (Beijing) region, 70% of the traffic is allocated to the China (Beijing) region and 30% is allocated to the China (Hangzhou) region.
            "from": "cn-beijing",
            "to": {
                "cn-beijing": 70,
                "cn-hangzhou": 30,
            }
        }
    ]

Specifies whether to enable Prometheus to collect metrics. We recommend that you use Managed Service for Prometheus. Valid values:

• true: enables Prometheus to collect metrics.

• false: disables Prometheus to collect metrics.

Default value: false.

Specifies whether to integrate with the Open Policy Agent (OPA) plug-in. Valid values:

• true: integrates with the OPA plug-in.

• false: does not integrate with the OPA plug-in.

Default value: false.

The log level of the OPA proxy container. Valid values:

• info: outputs all information.

• debug: outputs debugging information and error messages.

• error: outputs only error messages.

The CPU resource request of the OPA proxy container.

The memory resource request of the OPA proxy container.

The CPU resource limit of the OPA proxy container.

The memory resource limit of the OPA proxy container.

Specifies whether to enable mesh audit. To enable this feature, you must activate Simple Log Service. Valid values:

• true: enables mesh audit.

• false: disables mesh audit.

Default value: false.

The SLS project that is used for mesh audit.

Default value: mesh-log-{meshId}.

Specifies whether to use a self-managed Zipkin system. Valid values:

• true: uses a self-managed Zipkin system.

• false: does not use a self-managed Zipkin system.

Default value: false.

The policy for accessing external services. Valid values:

• ALLOW_ANY: allows access to all external services.

• REGISTRY_ONLY: allows access to only the services that are registered with the service mesh.

The CPU resources required by the proxy.

The memory resources required by the proxy.

The CPU resource limit.

The memory resource limit.

The IP address ranges for which outbound traffic is intercepted.

The IP address ranges for which outbound traffic is not intercepted.

A comma-separated list of outbound ports that are excluded from redirection.

The inbound ports for which traffic is redirected to the sidecar proxy.

A comma-separated list of inbound ports that are excluded from redirection.

Specifies whether to enable automatic sidecar proxy injection for all namespaces. Valid values:

• true: enables automatic sidecar proxy injection for all namespaces.

• false: disables automatic sidecar proxy injection for all namespaces.

Default value: false.

Specifies whether to enable automatic sidecar proxy injection using pod annotations. Valid values:

• true: enables automatic sidecar proxy injection using pod annotations.

• false: disables automatic sidecar proxy injection using pod annotations.

Default value: false.

The CPU resource request of the sidecar injector pod.

The memory resource request of the sidecar injector pod.

The CPU resource limit of the sidecar injector pod.

The memory resource limit of the sidecar injector pod.

Other configurations for automatic sidecar proxy injection. The value must be in the YAML format.

Specifies whether to enable Container Network Interface (CNI). Valid values:

• true: enables CNI.

• false: disables CNI.

Default value: false.

The namespaces that are excluded from CNI.

Specifies whether to enable OPA. Valid values:

• true: enables OPA.

• false: disables OPA.

Default value: false.

Specifies whether to enable support for HTTP 1.0. Valid values:

• true: enables support for HTTP 1.0.

• false: disables support for HTTP 1.0.

Default value: false.

Specifies whether to enable the mesh topology feature. To enable this feature, you must first enable Prometheus to collect metrics. If you disable Prometheus to collect metrics, this feature is forcibly disabled. Valid values:

• true: enables the mesh topology feature.

• false: disables the mesh topology feature.

Default value: false.

Specifies whether to use a self-managed Prometheus instance. Valid values:

• true: uses a self-managed Prometheus instance.

• false: does not use a self-managed Prometheus instance.

Default value: false.

The endpoint of the Prometheus service. If you do not use a self-managed Prometheus instance, use the endpoint of an ARMS Prometheus instance.

Specifies whether to enable access log collection. Valid values:

• true: enables access log collection.

• false: disables access log collection.

Default value: false.

Specifies whether to enable Microservices Engine (MSE). Valid values:

• true: enables MSE.

• false: disables MSE.

Default value: false.

Specifies whether to enable the Redis filter. Valid values:

• true: enables the Redis filter.

• false: disables the Redis filter. Default value: false.

Specifies whether to enable the MySQL filter. Valid values:

• true: enables the MySQL filter.

• false: disables the MySQL filter.

Default value: false.

Specifies whether to enable the Thrift filter. Valid values:

• true: enables the Thrift filter.

• false: disables the Thrift filter.

Default value: false.

Specifies whether to enable the WebAssembly filter. Valid values:

• true: enables the WebAssembly filter.

• false: disables the WebAssembly filter.

Default value: false.

Specifies whether to enable DNS proxying. Valid values:

• true: enables DNS proxying.

• false: disables DNS proxying.

Default value: false.

Specifies whether to enable the Dubbo filter. Valid values:

• true: enables the Dubbo filter.

• false: disables the Dubbo filter.

Default value: false.

Specifies whether to enable gateway configuration filtering. Valid values:

• true: enables gateway configuration filtering.

• false: disables gateway configuration filtering.

Default value: false.

Specifies whether to enable the Secret Discovery Service (SDS). Valid values:

• true: enables the SDS.

• false: disables the SDS.

Default value: false.

Specifies whether to enable the gRPC Access Log Service (ALS) of Envoy. Valid values:

• true: enables the gRPC ALS of Envoy.

• false: disables the gRPC ALS of Envoy.

Default value: false.

The endpoint of the gRPC ALS of Envoy.

The port of the gRPC ALS of Envoy.

Specifies whether to enable Gateway API. Valid values:

• true: enables Gateway API.

• false: disables Gateway API.

Default value: false.

Specifies whether to use an external service registry. Valid values:

• true: uses an external service registry.

• false: does not use an external service registry.

Default value: false.

The ID of the Nacos instance.

The custom format of access logs. This parameter is ignored if access log collection is disabled. The value must be a JSON string. The JSON string must contain the following keys: authority_for, bytes_received, bytes_sent, downstream_local_address, downstream_remote_address, duration, istio_policy_status, method, path, protocol, requested_server_name, response_code, response_flags, route_name, start_time, trace_id, upstream_cluster, upstream_host, upstream_local_address, upstream_service_time, upstream_transport_failure_reason, user_agent, and x_forwarded_for.

Specifies whether to enable access logs. Valid values:

• "": disables access logs.

• /dev/stdout: enables access logs.

The custom SLS project to which access logs are collected.

Specifies whether to enable the history revision management feature for Istio resources in Service Mesh (ASM).

Specifies whether to enable data plane clusters to access Istio resources using the Kubernetes API. This feature is available only for ASM instances of v1.9.7.93 or later.

The duration for which the istio-proxy container waits for connections to drain before termination. For example, a value of 5s indicates 5 seconds.

The CPU resource limit of the istio-init container.

The memory resource limit of the istio-init container.

The CPU resource request of the istio-init container.

The memory resource request of the istio-init container.

The lifecycle of the istio-proxy container.

Specifies whether to enable the MultiBuffer-based acceleration feature.

The polling delay for the MultiBuffer feature. The default value is empty.

The label selectors for the namespaces of the data plane. The selectors are used for selective service discovery.

The instance type of the service mesh. Valid values:

• standard: Standard Edition.

• enterprise: Enterprise Edition.

• ultimate: Ultimate Edition.

Specifies whether to enable OPA injection scope control. Valid values:

• true: enables OPA injection scope control.

• false: disables OPA injection scope control.

The minimum number of CPU cores that are requested by the pod responsible for OPA proxy injection. For example, 1000m indicates one CPU core.

The minimum memory that is requested by the pod responsible for OPA proxy injection. For example, 50Mi indicates 50 MB.

The maximum number of CPU cores that are allowed for the pod responsible for OPA proxy injection. For example, 1000m indicates one CPU core.

The maximum memory that is allowed for the pod responsible for OPA proxy injection. For example, 1024Mi indicates 1024 MB.

Specifies whether to create a Classic Load Balancer (CLB) instance for accessing the ASM mesh topology.

Specifies whether to enable automatic node feature discovery.

Specifies whether to remove the feature labels from nodes when you disable automatic node feature discovery.

This parameter is required only when you set NFDEnabled to false.

The minimum number of CPU cores that are requested by the proxy service for exporting Tracing Analysis data. For example, 1000m indicates one CPU core.

The minimum memory that is requested by the proxy service for exporting Tracing Analysis data. For example, 1Mi indicates 1 MB.

The maximum number of CPU cores that are allowed for the proxy service for exporting Tracing Analysis data. For example, 1000m indicates one CPU core.

The maximum memory that is allowed for the proxy service for exporting Tracing Analysis data. For example, 1Mi indicates 1 MB.

The number of replicas for the proxy service that exports Tracing Analysis data.

The retention period of the access logs of the ingress gateway that are collected in SLS. Unit: days. For example, 30 indicates 30 days.

The retention period of the access logs of the sidecar proxy that are collected in SLS. Unit: days. For example, 30 indicates 30 days.

Specifies whether to enable automatic diagnostics for the service mesh. If you enable this feature, the service mesh is automatically diagnosed when you modify an Istio resource in the service mesh.

The outbound ports for which traffic is redirected to the sidecar proxy.

The log level of the sidecar proxy on the data plane. The log levels are sorted in ascending order of the log verbosity: none, error, warn, info, and debug.

The degree of parallelism for the sidecar proxy on the data plane.

Specifies whether to wait for the sidecar proxy container to start before the application container starts when a pod is being started.

The additional metrics that are reported by the sidecar proxy on the data plane.

The mode of inbound traffic interception by the sidecar proxy. Valid values:

• REDIRECT: the default interception mode. The sidecar proxy intercepts inbound traffic using redirection.

• TPROXY: the transparent proxy mode. The sidecar proxy intercepts inbound traffic using a transparent proxy.

Specifies whether to load the bootstrap configurations before the sidecar proxy starts.

If you enable the mesh topology feature and use ARMS Prometheus to collect metrics, and the ARMS Prometheus instance has a token-based authentication configuration, you can use this parameter to specify the authentication token. This authorizes the mesh topology to access the ARMS Prometheus instance. The value is a JSON-encoded string. The key in the JSON object is the ID of the data plane cluster, and the value is the authentication token of the ARMS Prometheus instance that is installed in the data plane cluster.

The default scheduling configurations that ASM delivers to the data plane components. You can configure nodeSelector and tolerations in the JSON format.

If you enable the mesh topology feature and create a CLB instance to access the mesh topology, you can use this parameter to configure the CLB instance for the mesh topology service in different clusters using annotations.

The value is a JSON-encoded string. The key in the JSON object is the ID of the data plane cluster, and the value is the annotation of the mesh topology service in the data plane cluster.

For more information about how to configure a CLB instance using annotations, see Use annotations to configure a Classic Load Balancer (CLB) instance.

Specifies whether to collect the access logs of the ASM gateway to Simple Log Service.

Specifies whether to collect the access logs of the sidecar proxy to Simple Log Service.

The labels of the workloads that are offloaded.

The new root certificate. You can modify this parameter only if you used a custom certificate when you created the service mesh.

The new CA certificate. You can modify this parameter only if you used a custom certificate when you created the service mesh.

The new CA key. You can modify this parameter only if you used a custom certificate when you created the service mesh.

The certificate chain from the CA certificate to the root certificate. The certificate chain must contain at least two certificates.

Specifies whether to install SMC acceleration.

Specifies whether to enable HTTP/3 support.