:CreateServiceMesh

The operation that you want to perform. Set the value to CreateServiceMesh.

The ID of the region in which the ASM instance resides.

The Istio version of the ASM instance.

The ID of the virtual private cloud (VPC).

Specifies whether to expose the API server to the Internet. Valid values:

• true: exposes the API server to the Internet.
• false: does not expose the API server to the Internet.

Default value: false.

Specifies whether to enable the Tracing Analysis feature. Valid values:

• true: enables the Tracing Analysis feature.
• false: disables the Tracing Analysis feature.

Default value: false.

The name of the ASM instance.

The ID of the vSwitch to which the ASM instance is connected.

The sampling percentage of tracing analysis.

Specifies whether to use a self-managed Zipkin system to collect tracing data. Valid values:

• true: uses a self-managed Zipkin system to collect tracing data.
• false: uses Alibaba Cloud Tracing Analysis to collect tracing data.

Default value: false.

Specifies whether to route traffic to the nearest instance. Valid values:

• true: routes traffic to the nearest instance.
• false: does not route traffic to the nearest instance.

Default value: false.

The configurations for the access to the nearest instance.

Specifies whether to enable Prometheus monitoring. We recommend that you use Prometheus Service of Application Real-Time Monitoring Service (ARMS). Valid values:

• true: enables Prometheus monitoring.
• false: does not enable Prometheus monitoring.

Default value: false.

Specifies whether to install the Open Policy Agent (OPA) plug-in. Valid values:

• true: installs the OPA plug-in.
• false: does not install the OPA plug-in.

Default value: false.

The log level of OPA.

The number of CPU cores that are requested by OPA. You can specify the parameter value in the standard representation form of CPUs in Kubernetes. For example, a value of 1 represents one CPU core.

The size of the memory that is requested by OPA. You can specify the parameter value in the standard quantity representation used by Kubernetes. For example, a value of 1 Mi represents a memory size of 1,024 KB.

The maximum number of CPU cores that are available for OPA.

The maximum size of the memory that is available for OPA. You can specify the parameter value in the standard quantity representation used by Kubernetes. For example, a value of 1 Mi represents a memory size of 1,024 KB.

Specifies whether to enable the mesh audit feature. To enable this feature, make sure that you have activated Log Service. Valid values:

• true: enables the mesh audit feature.
• false: disables the mesh audit feature.

Default value: false.

The name of the Log Service project that is used for mesh audit.

Default value: mesh-log-{ASM instance ID}.

The number of CPU cores that are requested by the proxy container.

The size of the memory that is requested by the proxy container.

The maximum number of CPU cores that are available for the proxy container.

The maximum size of the memory that is available for the proxy container.

The IP ranges in CIDR form to redirect to sidecar proxies in the ASM instance.

The IP ranges in CIDR form to be excluded from redirection to sidecar proxies in the ASM instance.

The outbound ports to be excluded from redirection to the sidecar proxies in the ASM instance. Separate multiple port numbers with commas (,).

The inbound ports to be excluded from redirection to the sidecar proxies in the ASM instance. Separate multiple port numbers with commas (,).

Specifies whether to enable the OPA plug-in. Valid values:

• true: enables the OPA plug-in.
• false: disables the OPA plug-in.

Default value: false.

Specifies whether to enable the mesh topology feature. To enable this feature, make sure that you have enabled Prometheus monitoring. If Prometheus monitoring is disabled, you must set this parameter to false. Valid values:

• true: enables the mesh topology feature.
• false: disables the mesh topology feature.

Default value: false.

Specifies whether to enable access log collection. Valid values:

• true: enables access log collection.
• false: disables access log collection.

Default value: false.

Specifies whether to use a custom Prometheus instance. Valid values:

• true: uses a custom Prometheus instance.
• false: does not use a custom Prometheus instance.

Default value: false.

The endpoint of the custom Prometheus instance.

Specifies whether to enable Redis Filter. Valid values:

• true: enables Redis Filter.
• false: disables Redis Filter.

Default value: false.

Specifies whether to enable MySQL Filter. Valid values:

• true: enables MySQL Filter.
• false: disables MySQL Filter.

Default value: false.

Specifies whether to enable Thrift Filter. Valid values:

• true: enables Thrift Filter.
• false: disables Thrift Filter.

Default value: false.

Specifies whether to enable WebAssembly Filter. Valid values:

• true: enables WebAssembly Filter.
• false: disables WebAssembly Filter.

Default value: false.

Specifies whether to enable Microservices Engine (MSE). Valid values:

• true: enables MSE.
• false: disables MSE.

Default value: false.

Specifies whether to enable the DNS proxy feature. Valid values:

• true: enables the DNS proxy feature.
• false: disables the DNS proxy feature.

Default value: false.

The edition of the ASM instance.

Specifies whether to enable the external service registry. Valid values:

• true: enables the external service registry.
• false: disables the external service registry.

Default value: false.

The instance ID of the Nacos registry.

Specifies whether to enable Dubbo Filter. Valid values:

• true: enables Dubbo Filter.
• false: disables Dubbo Filter.

Default value: false.

Specifies whether to enable gateway configuration filtering. Valid values:

• true: enables gateway configuration filtering.
• false: disables gateway configuration filtering.

Default value: false.

Specifies whether to enable Secret Discovery Service (SDS). Valid values:

• true: enables SDS.
• false: disables SDS.

Default value: false.

Specifies whether to enable gRPC Access Log Service (ALS) for Envoy. Valid values:

• true: enables gRPC ALS.
• false: disables gRPC ALS.

Default value: false.

The endpoint of gRPC ALS for Envoy.

The port of gRPC ALS for Envoy.

Specifies whether to enable Gateway API. Valid values:

• true: enables Gateway API.
• false: disables Gateway API.

Default value: false.

Specifies whether to enable the collection of control-plane logs. Valid values:

• true: enables the collection of control-plane logs.
• false: disables the collection of control-plane logs.

Default value: false.

The name of the Log Service project that is used to collect the logs of the control plane.

The custom format of access logs. To set this parameter, you must enable access log collection. Otherwise, you cannot set this parameter. The value must be a JSON string. The following key names must be contained: authority_for, bytes_received, bytes_sent, downstream_local_address, downstream_remote_address, duration, istio_policy_status, method, path, protocol, requested_server_name, response_code, response_flags, route_name, start_time, trace_id, upstream_cluster, upstream_host, upstream_local_address, upstream_service_time, upstream_transport_failure_reason, user_agent, and x_forwarded_for.

Specifies whether to enable access logging. Valid values:

• "": disables access logging.
• /dev/stdout: enables access logging. Access logs are written to /dev/stdout.

The name of the Log Service project that is used to collect access logs.

Specifies whether to enable the rollback feature for Istio resources. Valid values:

• true: enables the rollback feature for Istio resources.
• false: disables the rollback feature for Istio resources.

Default value: false.

Specifies whether to allow the Kubernetes API of clusters on the data plane to access Istio resources. To use this feature, the version of the ASM instance must be V1.9.7.93 or later. Valid values:

• true: allows the Kubernetes API of clusters on the data plane to access Istio resources.
• false: does not allow the Kubernetes API of clusters on the data plane to access Istio resources.

Default value: false.

Specifies whether to enable Application High Availability Service (AHAS)-based throttling. Valid values:

• true: enables AHAS-based throttling.
• false: disables AHAS-based throttling.

Default value: false.

The instance type of the Server Load Balancer (SLB) instance bound to the API server. Valid values: slb.s1.small, slb.s2.small, slb.s2.medium, slb.s3.small, slb.s3.medium, and slb.s3.large.

The instance type of the SLB instance bound to Istio Pilot. Valid values: slb.s1.small, slb.s2.small, slb.s2.medium, slb.s3.small, slb.s3.medium, and slb.s3.large.

The billing method of the SLB instance. Valid values:

• PayOnDemand: pay-as-you-go.
• PrePaid: subscription.

The subscription period of the SLB instance. Unit: month. This parameter is valid only if the ChargeType parameter is set to PrePaid. For example, if the subscription period is one year, set this parameter to 12.

Specifies whether to enable auto-renewal for the SLB instance if the SLB instance uses the subscription billing method. Valid values:

• true: enables auto-renewal.
• false: disables auto-renewal.

The auto-renewal period of the SLB instance. This parameter is valid only if the ChargeType parameter is set to PrePaid. If the subscription period of the SLB instance is less than one year, the value of this parameter indicates the number of months for auto-renewal. If the subscription period of the SLB instance is more than one year, the value of this parameter indicates the number of years for auto-renewal.

The specification of the ASM instance. Valid values:

• standard: Standard Edition
• enterprise: Enterprise Edition
• ultimate: Ultimate Edition

Specifies whether to enable MultiBuffer-based Transport Layer Security (TLS) acceleration. Valid values:

• true: enables MultiBuffer-based TLS acceleration.
• false: disables MultiBuffer-based TLS acceleration.

Default value: true

The pull-request latency. Default value: 30. Unit: seconds.

Specifies whether to use an existing CA certificate and private key.

The existing CA certificate, which is encoded in Base64. This parameter is used in scenarios where you migrate open source Istio to ASM. It specifies the content of the ca-cert.pem file in the istio-ca-secret secret. The secret is in the istio-system namespace of the Kubernetes cluster where the open source Istio is installed.

The existing CA key, which is encoded in Base64. This parameter is used in scenarios where you migrate open source Istio to ASM. It specifies the content of the ca-key.pem file in the istio-ca-secret secret. The secret is in the istio-system namespace of the Kubernetes cluster where the open source Istio is installed.

The type of the existing CA certificate. Valid values:

• 1: Self-signed certificate generated by Istiod. The certificate corresponds to the secret named istio-ca-secret in the istio-system namespace. If you use this type of certificate, you must set ExistingCaCert and ExsitingCaKey parameters.
• 2: Administrator-specified certificate. For more information, see plugin ca cert. In most cases, the certificate corresponds to the secret named cacerts in the istio-system namespace. If you use this type of certificate, you must set ExisingRootCaCert and ExisingRootCaKey parameters.

The existing root certificate, which is encoded in Base64.

The private key that corresponds to the root certificate, which is encoded in Base64.

The ID of the request.

The ID of the ASM instance.