ALIYUN::ASM::ServiceMesh is used to create an Alibaba Cloud Service Mesh (ASM) instance.
Syntax
{
"Type": "ALIYUN::ASM::ServiceMesh",
"Properties": {
"EnableAudit": Boolean,
"OPA": Map,
"IstioVersion": String,
"ApiServerPublicEip": Boolean,
"LocalityLoadBalancing": Boolean,
"Telemetry": Boolean,
"OutboundTrafficPolicy": String,
"AuditProject": String,
"TraceSampling": Number,
"Name": String,
"Proxy": Map,
"VpcId": String,
"PilotPublicEip": Boolean,
"IncludeIPRanges": String,
"VSwitches": List,
"Tracing": Boolean,
"CustomizedZipkin": Boolean
}
}
Properties
Property | Type | Required | Editable | Description | Constraint |
EnableAudit | Boolean | No | Yes | Specifies whether to enable the mesh audit feature. | Valid values:
Note To enable this feature, make sure that Log Service is activated. |
OPA | Map | No | Yes | The information about the Open Policy Agent (OPA) plug-in. | For more information, see OPA properties. |
IstioVersion | String | No | No | The Istio version of the instance. | None. |
ApiServerPublicEip | Boolean | No | No | Specifies whether to expose the API server to the Internet. | Valid values:
|
LocalityLoadBalancing | Boolean | No | Yes | Specifies whether to route traffic to the nearest instance. | Valid values:
|
Telemetry | Boolean | No | Yes | Specifies whether to enable Prometheus monitoring. | We recommend that you use Prometheus Service of Application Real-Time Monitoring Service (ARMS). |
OutboundTrafficPolicy | String | No | Yes | The outbound traffic policy. | Valid values:
|
AuditProject | String | No | Yes | The name of the log project that is used for mesh audit. | Default value: mesh-log-{meshId}. |
TraceSampling | Number | No | Yes | The sampling percentage of tracing analysis. | None. |
Name | String | No | No | The name of the instance. | None. |
Proxy | Map | No | Yes | The proxy configurations. | For more information, see Proxy properties. |
VpcId | String | Yes | No | The virtual private cloud (VPC) ID. | None. |
PilotPublicEip | Boolean | No | No | Specifies whether to expose Istio Pilot to the Internet. | Valid values:
|
IncludeIPRanges | String | No | Yes | The IP address ranges of external services to which traffic is intercepted. | None. |
| List | Yes | No | The vSwitch ID. | None. |
Tracing | Boolean | No | Yes | Specifies whether to enable the tracing analysis feature. | Valid values:
Note To enable this feature, make sure that Tracing Analysis is activated. |
CustomizedZipkin | Boolean | No | Yes | Specifies whether to enable self-managed Zipkin. | Valid values:
|
OPA syntax
"OPA": {
"OPARequestCPU": String,
"OpenAgentPolicy": Boolean,
"OPALogLevel": String,
"OPALimitCPU": String,
"OPALimitMemory": String,
"OPARequestMemory": String
}
OPA properties
Property | Type | Required | Editable | Description | Constraint |
OPARequestCPU | String | No | Yes | The number of CPU cores that are requested by the OPA proxy container. | None. |
OpenAgentPolicy | Boolean | No | Yes | Specifies whether to enable the OPA plug-in. | Valid values:
|
OPALogLevel | String | No | Yes | The log level of the OPA proxy container. | None. |
OPALimitCPU | String | No | Yes | The maximum number of CPU cores that are available for the OPA proxy container. | None. |
OPALimitMemory | String | No | Yes | The maximum memory size that is available for the OPA proxy container. | None. |
OPARequestMemory | String | No | Yes | The memory size that is requested by the OPA proxy container. | None. |
Proxy syntax
"Proxy": {
"ClusterDomain": String,
"ProxyLimitCPU": String,
"ProxyLimitMemory": String,
"ProxyRequestCPU": String,
"ProxyRequestMemory": String
}
Proxy properties
Property | Type | Required | Editable | Description | Constraint |
ClusterDomain | String | No | Yes | The cluster domain of the instance. | None. |
ProxyLimitCPU | String | No | Yes | The maximum number of CPU cores that are available for the proxy. | None. |
ProxyLimitMemory | String | No | Yes | The maximum memory size that is available for the proxy. | None. |
ProxyRequestCPU | String | No | Yes | The number of CPU cores that are requested by the proxy. | None. |
ProxyRequestMemory | String | No | Yes | The memory size that is requested by the proxy. | None. |
Return values
Fn::GetAtt
ServiceMeshId: The ID of the instance.