Alibaba Cloud Service Mesh:Enable control-plane log collection and log-based alerting in an ASM instance of a version earlier than 1.17.2.35

Prerequisites

An ASM instance is created and the version of the instance is earlier than 1.17.2.35. For more information, see Create an ASM instance.

Enable control-plane log collection

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose ASM Instance > Base Information.

3. In the Config Info section of the page that appears, click Enable next to Control-plane log collection.

   Important

   The control-plane Logstore stores the logs of the last 30 days and automatically discards earlier logs.

   • If this is the first time you enable control-plane log collection, the Enable Control-plane log collection dialog box appears. Create a project or select an existing project.

     When you create a project, you can choose to use either the default project name or a custom one. Then, click Submit.

     

   • If you have previously enabled and disabled control-plane log collection, a Note message appears. Click OK. The project that was used last time is automatically selected.

   After you enable control-plane log collection, you can view detailed control-plane logs by clicking View log next to Control-plane log collection in the Basic Information section.

Enable log-based alerting

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose ASM Instance > Base Information.

3. In the Config Info section of the page that appears, click Alert Setting next to Control-plane log collection.

4. In the Control-Plane Alert Setting dialog box, find the alert policy that you want to enable, select ASM Built-in Action Strategy (recommended) or select a custom action policy, and then click Enable Alert.

   An action policy specifies the action to be performed when an alert is triggered. You can create and modify action policies in Simple Log Service projects. For more information, see Create an action policy.

5. In the Note message that appears, click OK.

Configure alert contacts

You can configure built-in action policies for gateways, alert contacts, and notification templates in Simple Log Service.

1. Log on to the Simple Log Service console.

2. In the Projects section, click the name of the desired project. In the left-side navigation pane, click Alerts.

3. On the Alert Center page, choose Notification Objects > User Group Management.

4. On the User Group Management tab, find sls.app.asm.builtin and click Edit in the Actions column.

5. In the Edit User Group dialog box, select the members that you want to add, click the icon to add the members to the user group, and then click OK.

Verify the alert notification settings

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose ASM Gateways > Gateway. On the page that appears, click Create from YAML.

3. On the Create page, select a namespace and a template, configure a YAML file, and then click Create.

   In this example, the default namespace is used to configure an Istio gateway. Sample YAML code:

   apiVersion: networking.istio.io/v1beta1
   kind: Gateway
   metadata:
     name:  gateway-test
     namespace: default
   spec:
     selector:
       istio: ingressgateway
     servers:
       - hosts:
           - '*console.aliyun.com'
         port:
           name: https
           number: 443
           protocol: HTTPS
         tls:
           credentialName: not-existing-credential
           mode: SIMPLE

4. View alert notifications.

   1. On the details page of the ASM instance, choose ASM Instance > Base Information in the left-side navigation pane.

   2. In the Config Info section of the page that appears, click View log next to Control-plane log collection.

   3. In the Simple Log Service console, search for 'ACK ERROR' to view the alert information.

      If you have configured email notifications for alerts, you can view alert information by checking your emails.

Handle alerts

Alerts triggered by potential configuration risks

If ASM detects configurations in your cluster that may cause unexpected results, alerts are reported. You can view the alerts on the Mesh Diagnosis page and follow the instructions on the page to correct the configurations.

Alerts triggered by incorrect configurations

If ASM detects incorrect configurations in your cluster that are likely to cause unexpected behaviors, alerts are reported. We recommend that you view such alerts on the Mesh Diagnosis page and follow the instructions on the page to correct the configurations as soon as possible.

Alerts triggered when configuration pushes from the control plane to the data plane fail due to configuration errors

Related operations

Modify the settings of a control-plane log project

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose ASM Instance > Base Information.

3. In the Config Info section of the Base Information page, click Change Log Project on the right of Control-plane log collection. In the Change Log Project dialog box, modify the settings as needed and click Submit.