Queries the details of an Alibaba Cloud Service Mesh (ASM) instance.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

ParameterTypeRequiredExampleDescription
ActionStringYesDescribeServiceMeshDetail

The operation that you want to perform. Set the value to DescribeServiceMeshDetail.

ServiceMeshIdStringYesc08ba3fd1e6484b0f8cc1ad8fe10d****

The ID of the ASM instance.

Response parameters

ParameterTypeExampleDescription
RequestIdString11fd0027-c27e-41bb-a565-75583054****

The ID of the request.

ServiceMeshObject

The details of the ASM instance.

EndpointsObject

The endpoints of the ASM instance.

IntranetPilotEndpointString192.168.**.**:15011

The endpoint that is used to access Istio Pilot from the internal network.

PublicPilotEndpointString182.92.**.**:15011

The endpoint that is used to expose Istio Pilot to the Internet.

IntranetApiServerEndpointStringhttps://192.168.**.**:6443

The endpoint that is used to access the API server from the internal network.

PublicApiServerEndpointStringhttps://123.56.**.**:6443

The endpoint that is used to expose the API server to the Internet.

ServiceMeshInfoObject

The basic information about the ASM instance.

ProfileStringDefault

The edition of the ASM instance. Valid values:

  • Default: Standard Edition
  • Pro: Professional Edition
CreationTimeString2020-04-21T09:42:20+08:00

The time when the ASM instance was created.

UpdateTimeString2020-06-03T14:48:54+08:00

The time when the ASM instance was last modified.

ErrorMessageString error

The error message that is returned when the call failed.

VersionStringv1.7.4.0-gfb34ba99-aliyun

The version of the ASM instance.

StateStringrunning

The status of the ASM instance.

ServiceMeshIdStringc08ba3fd1e6484b0f8cc1ad8fe10d****

The ID of the ASM instance.

NameStringmesh1

The name of the ASM instance.

RegionIdStringcn-beijing

The ID of the region in which the ASM instance resides.

SpecObject

The specifications of the ASM instance.

NetworkObject

The network configurations of the ASM instance.

VpcIdStringvpc-2zew0rajjkmxy2369****

The ID of the virtual private cloud (VPC).

SecurityGroupIdStringsg-2ze384sxttxbctnj****

The ID of the security group.

VSwitchesArray of Stringvsw-2ze66z3ntvsej0mdo****

The ID of the vSwitch.

LoadBalancerObject

The information about load balancing.

PilotPublicEipBooleantrue

Indicates whether Istio Pilot is exposed to the Internet. Valid values:

  • true: Istio Pilot is exposed to the Internet.
  • false: Istio Pilot is not exposed to the Internet.
PilotPublicLoadbalancerIdStringlb-2zesa8qs8kbkj9jkl****

The ID of the Server Load Balancer (SLB) instance that is used when Istio Pilot is exposed to the Internet.

ApiServerLoadbalancerIdStringlb-2zekaak10uxds44vx****

The ID of the SLB instance that is used when the API server is exposed to the Internet.

ApiServerPublicEipBooleantrue

Indicates whether the API server is exposed to the Internet. Valid values:

  • true: The API server is exposed to the Internet.
  • false: The API server is not exposed to the Internet.
MeshConfigObject

The configurations of the ASM instance.

OPAObject

The information about the Open Policy Agent (OPA) plug-in.

RequestMemoryString1024Mi

The size of the memory that is requested by the OPA proxy container.

LogLevelStringinfo

The level of the logs to be generated for OPA.

EnabledBooleantrue

Indicates whether the OPA plug-in is installed. Valid values:

  • true: The OPA plug-in is installed.
  • false: The OPA plug-in is not installed.
LimitMemoryString512Mi

The maximum size of the memory that is available to the OPA proxy container.

RequestCPUString2

The number of CPU cores that are requested by the OPA proxy container.

LimitCPUString1

The maximum number of CPU cores that are available to the OPA proxy container.

PrometheusObject

The configurations of Prometheus monitoring.

UseExternalBooleanfalse

Indicates whether a custom Prometheus instance is used. Valid values:

  • true: A custom Prometheus instance is used.
  • false: No custom Prometheus instance is used.
ExternalUrlStringhttp://prometheus:9090

The endpoint of Prometheus monitoring. If you use a custom Prometheus instance, this parameter is populated by the system.

AccessLogObject

The configurations of access log collection.

EnabledBooleantrue

Indicates whether access log collection is enabled. Valid values:

  • true: Access log collection is enabled.
  • false: Access log collection is disabled.
ProjectStringk8s-log-b7b05d08670e41ca8c8fc0b7718f*****

The name of the Log Service project that stores access logs.

PilotObject

The Pilot configurations.

Http10EnabledBooleanfalse

Indicates whether HTTP/1.0 is supported. Valid values:

  • true: HTTP/1.0 is supported.
  • false: HTTP/1.0 is not supported.
TraceSamplingFloat100

The sampling percentage of tracing analysis.

FeatureObject

The configurations of Pilot features.

FilterGatewayClusterConfigBooleanfalse

Indicates whether gateway configuration filtering is enabled. Valid values:

  • true: Gateway configuration filtering is enabled.
  • false: Gateway configuration filtering is disabled.
EnableSDSServerBooleanfalse

Indicates whether Secret Discovery Service (SDS) is enabled. Valid values:

  • true: SDS is enabled.
  • false: SDS is disabled.
ConfigSourceObject

The configurations of communication between external services and services in the mesh.

EnabledBooleanfalse

Indicates whether communication is allowed between external services and services in the mesh. Valid values:

  • true: The communication is allowed.
  • false: The communication is not allowed.
NacosIDStringmse-cn-tl326******

The ID of the Nacos instance that provides external service information.

MSEObject

The configurations of Microservices Engine (MSE).

EnabledBooleanfalse

Indicates whether MSE is enabled. Valid values:

  • true: MSE is enabled.
  • false: MSE is disabled.
CustomizedZipkinBooleanfalse

Indicates whether a custom Zipkin system is used. Valid values:

  • true: A custom Zipkin system is used.
  • false: No custom Zipkin system is used.
SidecarInjectorObject

The configurations of the sidecar injector.

EnableNamespacesByDefaultBooleanfalse

Indicates whether automatic sidecar injection is enabled for all namespaces. Valid values:

  • true: Automatic sidecar injection is enabled for all namespaces.
  • false: Automatic sidecar injection is not enabled for all namespaces.
RequestMemoryString512Mi

The size of the memory that is requested by the sidecar injector pod.

LimitMemoryString2048Mi

The maximum size of the memory that is available to the sidecar injector pod.

RequestCPUString1000m

The number of CPU cores that are requested by the sidecar injector pod.

AutoInjectionPolicyEnabledBooleantrue

Indicates whether automatic sidecar injection can be enabled by using pod annotations. Valid values:

  • true: Automatic sidecar injection can be enabled by using pod annotations.
  • false: Automatic sidecar injection cannot be enabled by using pod annotations.
LimitCPUString4000m

The maximum number of CPU cores that are available to the sidecar injector pod.

InitCNIConfigurationObject

The configurations of Container Network Interface (CNI).

ExcludeNamespacesStringkube-system,istio-system

The namespaces to exclude. The CNI plug-in ignores pods in the excluded namespaces.

EnabledBooleanfalse

Indicates whether the CNI plug-in is enabled. Valid values:

  • true: The CNI plug-in is enabled.
  • false: The CNI plug-in is disabled.
SidecarInjectorWebhookAsYamlString{"injectedAnnotations":{"test/istio-init":"runtime/default2","test/istio-proxy":"runtime/default"},"replicaCount":2,"nodeSelector":{"beta.kubernetes.io/os":"linux"}}

Other configurations of automatic sidecar injection, in the YAML format. For more information, see Enable automatic sidecar injection by using multiple methods.

SidecarInjectorNumInteger1

The number of component replicas that are used for sidecar injection. Default value: 1.

IncludeIPRangesString192.168.0.0/16

The IP ranges in CIDR form to redirect to the sidecar proxies in the ASM instance.

ExcludeIPRangesString172.16.0.0

The IP ranges in CIDR form to be excluded from redirection to sidecar proxies in the ASM instance.

ExcludeOutboundPortsString80,81

The outbound ports to be excluded from redirection to sidecar proxies in the ASM instance.

ExcludeInboundPortsString80,81

The inbound ports to be excluded from redirection to sidecar proxies in the ASM instance.

TelemetryBooleantrue

Indicates whether Prometheus monitoring is enabled. We recommend that you use Prometheus Service of Application Real-Time Monitoring Service (ARMS). Valid values:

  • true: Prometheus monitoring is enabled.
  • false: Prometheus monitoring is disabled.
EditionObject

The information about the edition.

NameStringPro

The name of the edition.

IstiodImageTagStringv1.9.7.1-3-gb3f1ab3c9c-pro-aliyun

The version of the Istiod image.

ProxyImageTagStringv1.9.7.1-3-gb3f1ab3c9c-pro-aliyun

The version of the Istio Proxy image.

ProtocolSupportObject

The configurations of protocol support.

MysqlFilterEnabledBooleanfalse

Indicates whether MySQL Filter is enabled. Valid values:

  • true: MySQL Filter is enabled.
  • false: MySQL Filter is disabled.
RedisFilterEnabledBooleanfalse

Indicates whether Redis Filter is enabled. Valid values:

  • true: Redis Filter is enabled.
  • false: Redis Filter is disabled.
ThriftFilterEnabledBooleanfalse

Indicates whether Thrift Filter is enabled. Valid values:

  • true: Thrift Filter is enabled.
  • false: Thrift Filter is disabled.
DubboFilterEnabledBooleanfalse

Indicates whether Dubbo Filter is enabled. Valid values:

  • true: Dubbo Filter is enabled.
  • false: Dubbo Filter is disabled.
OutboundTrafficPolicyStringALLOW_ANY

The outbound traffic policy. Valid values:

  • ALLOW_ANY: Outbound traffic to all external services is allowed.
  • REGISTRY_ONLY: Outbound traffic is allowed to only external services that are defined in the service registry of the ASM instance.
KialiObject

The configurations of mesh topology.

EnabledBooleanfalse

Indicates whether mesh topology is enabled. Mesh topology can be enabled only when Prometheus monitoring is enabled. If Prometheus monitoring is disabled, you must set this parameter to false. Valid values:

  • true: Mesh topology is enabled.
  • false: Mesh topology is disabled.
UrlStringhttp://1.2.**.**:20001

The endpoint of the mesh topology service.

TracingBooleantrue

Indicates whether tracing analysis is enabled. This feature can be enabled only after Tracing Analysis is activated. Valid values:

  • true: Tracing analysis is enabled.
  • false: Tracing analysis is disabled.
WebAssemblyFilterDeploymentObject

The configurations of WebAssembly Filter.

EnabledBooleanfalse

Indicates whether WebAssembly Filter is enabled. Valid values:

  • true:WebAssembly Filter is enabled.
  • false: WebAssembly Filter is disabled.
EnableLocalityLBBooleantrue

Indicates whether the feature that routes traffic to the nearest instance is enabled. Valid values:

  • true: The feature is enabled.
  • false: The feature is disabled.
AuditObject

The information about mesh audit.

EnabledBooleantrue

Indicates whether mesh audit is enabled. Valid values:

  • true: Mesh audit is enabled.
  • false: Mesh audit is disabled.
ProjectStringaudit-project

The name of the Log Service project that is used for mesh audit.

AuditProjectStatusStringaudit_project_not_exist

Indicates whether an audit project exists in the ASM instance. Valid values:

  • audit_project_exist: An audit project exists.
  • audit_project_not_exist: No audit project exists.
ProxyObject

The proxy configurations.

RequestMemoryString128Mi

The size of the memory that is requested.

ClusterDomainStringcluster.domain

The trusted domain.

LimitMemoryString1024Mi

The maximum size of the memory.

RequestCPUString100m

The number of CPU cores that are requested.

EnableDNSProxyingBooleanfalse

Indicates whether the Domain Name System (DNS) proxy feature is enabled. Valid values: Valid values:

  • true: The DNS proxy feature is enabled.
  • false: The DNS proxy feature is disabled.
LimitCPUString2000m

The maximum number of CPU cores.

AccessLogServiceEnabledBooleanfalse

Indicates whether gRPC Access Log Service (ALS) for Envoy is enabled. Valid values:

  • true: gRPC ALS for Envoy is enabled.
  • false: gRPC ALS for Envoy is disabled.
AccessLogServiceHostString0.0.0.0

The endpoint of gRPC ALS for Envoy.

AccessLogServicePortInteger9999

The port of gRPC ALS for Envoy.

AccessLogFormatString{"authority_for":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"}

The format of the access logs of sidecar proxies.

AccessLogFileString/dev/stdout

The path to the file that stores the access logs of sidecar proxies.

K8sNewAPIsSupportObject

The information about the Kubernetes API.

GatewayAPIEnabledBooleanfalse

Indicates whether Gateway API is enabled. Valid values:

  • true: Gateway API is enabled.
  • false: Gateway API is disabled.
LocalityLBObject

The configurations of cross-region load balancing.

EnabledBooleanfalse

Indicates whether cross-region load balancing is enabled. Valid values:

  • true: Cross-region load balancing is enabled.
  • false: Cross-region load balancing is disabled.
FailoverMap

The configurations of cross-region failover.

Note Only one of Failover and Distribute parameters can be set. If you set the Failover parameter, you cannot set the Distribute parameter.
DistributeMap

The configurations of cross-region traffic distribution.

Note Only one of Failover and Distribute parameters can be set. If you set the Distribute parameter, you cannot set the Failover parameter.
ControlPlaneLogInfoObject

The configurations of control-plane log collection.

EnabledBooleanfalse

Indicates whether the collection of control-plane logs is enabled. Valid values:

  • true: The collection of control-plane logs is enabled.
  • false: The collection of control-plane logs is disabled.
ProjectStringmesh-log-cbeb85a09161b4a26ab73e0ac****

The name of the Log Service project that stores control-plane logs.

ExtraConfigurationObject

The configurations of additional features for the ASM instance.

IstioCRHistoryObject

The configurations of the rollback feature for Istio resources.

EnableHistoryBooleanfalse

Indicates whether the rollback feature for Istio resources is enabled. Valid values:

  • true: The rollback feature for Istio resources is enabled.
  • false: The rollback feature for Istio resources is disabled.
CRAggregationEnabledBooleanfalse

Indicates whether the Kubernetes API of clusters on the data plane can be used to access Istio resources. Valid values:

  • true: The Kubernetes API of clusters on the data plane can be used to access Istio resources.
  • false: The Kubernetes API of clusters on the data plane cannot be used to access Istio resources.
MultiBufferObject

The information about Transport Layer Security (TLS) acceleration based on MulitiBuffer.

EnabledBooleanfalse

Indicates whether MulitiBuffer-based TLS acceleration is enabled. Valid values:

  • true: MulitiBuffer-based TLS acceleration is enabled.
  • false: MulitiBuffer-based TLS acceleration is disabled.
PollDelayString0.02s

The pull-request latency.

TerminationDrainDurationString5s

The maximum period of time that Istio Proxy waits for a request to end.

LifecycleObject

The lifecycle of Istio Proxy.

postStartObject

The post-start parameters.

execObject

The post-start script.

commandArray of Stringsleep 3s

The executed command.

httpGetObject

The HTTP GET request that is sent before the instance stops.

portString80

The port number of the request.

hostString127.xx.xx.1

The URL of the request.

schemeStringhttp

The request method. Valid values: http and https.

httpHeadersArray of httpHeaders

The HTTP request headers.

nameStringkey

The name of the HTTP request header.

valueStringvalue

The value of the HTTP request header field.

tcpSocketObject

The TCP socket request that is sent.

portString888

The port number of the TCP socket request.

hostString127.xx.xx.1

The URL of the TCP socket request.

preStopObject

The pre-close parameters.

execObject

The pre-close script.

commandArray of Stringsleep 3s

The executed command.

httpGetObject

The HTTP GET request that is sent before the instance stops.

portString80

The port number of the request.

hostString127.xx.xx.1

The URL of the request.

schemeStringhttp

The request method. Valid values: http and https.

httpHeadersArray of httpHeaders

The HTTP request headers.

nameStringkey

The name of the HTTP request header.

valueStringvalue

The value of the HTTP request header field.

tcpSocketObject

The TCP socket request that is sent.

portString888

The port number of the request.

hostString127.xx.xx.1

The URL of the request.

SidecarProxyInitResourceLimitObject

The resource limits on the istio-init container.

ResourceCPULimitString2000m

The maximum number of CPU cores that are available to the istio-init container.

ResourceMemoryLimitString1024Mi

The maximum size of the memory that is available to the istio-init container.

SidecarProxyInitResourceRequestObject

The resources that are requested by the istio-init container.

ResourceCPURequestString10m

The number of CPU cores that are requested by the istio-init container.

ResourceMemoryRequestString10Mi

The size of the memory that is requested by the istio-init container.

DiscoverySelectorsArray of Object[{"matchExpressions":[{"key":"asm-discovery","operator":"Exists"}]}]

The label selectors used to specify namespaces on the data plane. The control plane discovers and process only application services in the specified namespaces.

RateLimitObject

The configurations of Application High Availability Service (AHAS)-based throttling.

EnableGlobalRateLimitBooleanfalse

Indicates whether AHAS-based throttling is enabled. Valid values:

  • true: AHAS-based throttling is enabled.
  • false: AHAS-based throttling is disabled.
OPAScopeInjectionObject

The configurations of the feature of controlling the OPA injection scope.

OPAScopeInjectedBooleanfalse

Indicates whether the feature of controlling the OPA injection scope is enabled. Valid values:

  • true: The feature is enabled.
  • false: The feature is disabled.
CRAggregationConfigurationObject

Access to Istio resources by using the Kubernetes API on the data plane.

EnabledBooleantrue

Indicates whether Istio resources can be accessed by using the Kubernetes API on the data plane.

NFDConfigurationObject

The configurations of Node Feature Discovery (NFD).

EnabledBooleantrue

Indicates whether NFD is enabled.

NFDLabelPrunedBooleantrue

Indicates whether feature labels on nodes are cleared when NFD is disabled.

AccessLogExtraConfObject

The configurations of additional features for access log collection

GatewayLifecycleInteger30

The retention period for the access logs of the ingress gateway. Unit: day. The logs are collected by using the Log Service. For example, a value of 30 indicates that the logs are retained for 30 days.

SidecarLifecycleInteger30

The retention period for the access logs of sidecar proxies. Unit: day. The logs are collected by using the Log Service. For example, a value of 30 indicates that the logs are retained for 30 days.

AutoDiagnosisObject

The configurations of automatic diagnosis for the ASM instance.

AutoDiagnosisEnabledBooleantrue

Indicates whether automatic diagnosis is enabled for the ASM instance. If you enable this feature, the ASM instance is automatically diagnosed five minutes after you modify an Istio resource.

AdaptiveXdsConfigurationObject

The configurations of adaptive xDS optimization.

EnabledBooleantrue

Indicates whether adaptive xDS optimization is enabled.

EgressResourcesObject

The resource configurations of the egress gateway that is used by adaptive xDS optimization.

RequestsMap

The resources that are requested by the egress gateway.

LimitsMap

The resources that are available to the egress gateway.

EgressReplicaCountInteger2

The number of the egress gateway pod replicas.

EgressAutoscaleEnabledBooleantrue

Indicates whether Horizontal Pod Autoscaling (HPA) is enabled for the egress gateway.

EgressMinReplicaInteger1

The minimum number of egress gateway pod replicas when HPA is enabled.

EgressMaxReplicaInteger2

The maximum number of egress gateway pod replicas when HPA is enabled.

EgressHpaCpuObject

The CPU resource configurations of the egress gateway when HPA is enabled.

TargetAverageUtilizationInteger80

The expected CPU utilization when HPA is enabled. Valid values: 1 to 100. If the CPU utilization exceeds this value, the number of pod replicas increases. If the CPU utilization is less than this value, the number of pod replicas decreases.

EgressHpaMemoryObject

The memory resource configurations of the egress gateway when HPA is enabled.

TargetAverageUtilizationInteger80

The expected memory usage when HPA is enabled. Valid values: 1 to 100. If the memory usage exceeds this value, the number of pod replicas increases. If the memory usage is less than this value, the number of pod replicas decreases.

ClustersArray of String["caf089e56daba4c51a8906fe43ea1****","c80f45444b3da447da60a911390c2****"]

The list of clusters.

ClusterSpecStringstandard

The specification of the ASM instance. Valid values:

  • standard: Standard Edition
  • enterprise: Enterprise Edition
  • ultimate: Ultimate Edition
OwnerTypeStringackone

The Alibaba Cloud service for which the ASM instance is created. Valid values:

  • ackone: The ASM instance is created for Alibaba Cloud Distributed Cloud Container Platform (ACK One).
  • An empty value indicates that the ASM instance is created by the user.
OwnerIdStringcc3e96f249d124eb38b72718ec5*****

The ID of the Alibaba Cloud service instance for which the ASM instance is created.

Examples

Sample requests

http(s)://[Endpoint]/?Action=DescribeServiceMeshDetail
&ServiceMeshId=c08ba3fd1e6484b0f8cc1ad8fe10d****
&Common request parameters

Sample success responses

XML format

HTTP/1.1 200 OK
Content-Type:application/xml

<DescribeServiceMeshDetailResponse>
    <RequestId>11fd0027-c27e-41bb-a565-75583054****</RequestId>
    <ServiceMesh>
        <Endpoints>
            <IntranetPilotEndpoint>192.168.**.**:15011</IntranetPilotEndpoint>
            <PublicPilotEndpoint>182.92.**.**:15011</PublicPilotEndpoint>
            <IntranetApiServerEndpoint>https://192.168.**.**:6443</IntranetApiServerEndpoint>
            <PublicApiServerEndpoint>https://123.56.**.**:6443</PublicApiServerEndpoint>
        </Endpoints>
        <ServiceMeshInfo>
            <Profile>Default</Profile>
            <CreationTime>2020-04-21T09:42:20+08:00</CreationTime>
            <UpdateTime>2020-06-03T14:48:54+08:00</UpdateTime>
            <ErrorMessage> error</ErrorMessage>
            <Version>v1.7.4.0-gfb34ba99-aliyun</Version>
            <State>running</State>
            <ServiceMeshId>c08ba3fd1e6484b0f8cc1ad8fe10d****</ServiceMeshId>
            <Name>mesh1</Name>
            <RegionId>cn-beijing</RegionId>
        </ServiceMeshInfo>
        <Spec>
            <Network>
                <VpcId>vpc-2zew0rajjkmxy2369****</VpcId>
                <SecurityGroupId>sg-2ze384sxttxbctnj****</SecurityGroupId>
                <VSwitches>vsw-2ze66z3ntvsej0mdo****</VSwitches>
            </Network>
            <LoadBalancer>
                <PilotPublicEip>true</PilotPublicEip>
                <PilotPublicLoadbalancerId>lb-2zesa8qs8kbkj9jkl****</PilotPublicLoadbalancerId>
                <ApiServerLoadbalancerId>lb-2zekaak10uxds44vx****</ApiServerLoadbalancerId>
                <ApiServerPublicEip>true</ApiServerPublicEip>
            </LoadBalancer>
            <MeshConfig>
                <OPA>
                    <RequestMemory>1024Mi</RequestMemory>
                    <LogLevel>info</LogLevel>
                    <Enabled>true</Enabled>
                    <LimitMemory>512Mi</LimitMemory>
                    <RequestCPU>2</RequestCPU>
                    <LimitCPU>1</LimitCPU>
                </OPA>
                <Prometheus>
                    <UseExternal>false</UseExternal>
                    <ExternalUrl>http://prometheus:9090</ExternalUrl>
                </Prometheus>
                <AccessLog>
                    <Enabled>true</Enabled>
                    <Project>k8s-log-b7b05d08670e41ca8c8fc0b7718f*****</Project>
                </AccessLog>
                <Pilot>
                    <Http10Enabled>false</Http10Enabled>
                    <TraceSampling>100</TraceSampling>
                    <Feature>
                        <FilterGatewayClusterConfig>false</FilterGatewayClusterConfig>
                        <EnableSDSServer>false</EnableSDSServer>
                    </Feature>
                    <ConfigSource>
                        <Enabled>false</Enabled>
                        <NacosID>mse-cn-tl326******</NacosID>
                    </ConfigSource>
                </Pilot>
                <MSE>
                    <Enabled>false</Enabled>
                </MSE>
                <CustomizedZipkin>false</CustomizedZipkin>
                <SidecarInjector>
                    <EnableNamespacesByDefault>false</EnableNamespacesByDefault>
                    <RequestMemory>512Mi</RequestMemory>
                    <LimitMemory>2048Mi</LimitMemory>
                    <RequestCPU>1000m</RequestCPU>
                    <AutoInjectionPolicyEnabled>true</AutoInjectionPolicyEnabled>
                    <LimitCPU>4000m</LimitCPU>
                    <InitCNIConfiguration>
                        <ExcludeNamespaces>kube-system,istio-system</ExcludeNamespaces>
                        <Enabled>false</Enabled>
                    </InitCNIConfiguration>
                    <SidecarInjectorWebhookAsYaml>{"injectedAnnotations":{"test/istio-init":"runtime/default2","test/istio-proxy":"runtime/default"},"replicaCount":2,"nodeSelector":{"beta.kubernetes.io/os":"linux"}}</SidecarInjectorWebhookAsYaml>
                    <SidecarInjectorNum>1</SidecarInjectorNum>
                </SidecarInjector>
                <IncludeIPRanges>192.168.0.0/16</IncludeIPRanges>
                <ExcludeIPRanges>172.16.0.0</ExcludeIPRanges>
                <ExcludeOutboundPorts>80,81</ExcludeOutboundPorts>
                <ExcludeInboundPorts>80,81</ExcludeInboundPorts>
                <Telemetry>true</Telemetry>
                <Edition>
                    <Name>Pro</Name>
                    <IstiodImageTag>v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun</IstiodImageTag>
                    <ProxyImageTag>v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun</ProxyImageTag>
                </Edition>
                <ProtocolSupport>
                    <MysqlFilterEnabled>false</MysqlFilterEnabled>
                    <RedisFilterEnabled>false</RedisFilterEnabled>
                    <ThriftFilterEnabled>false</ThriftFilterEnabled>
                    <DubboFilterEnabled>false</DubboFilterEnabled>
                </ProtocolSupport>
                <OutboundTrafficPolicy>ALLOW_ANY</OutboundTrafficPolicy>
                <Kiali>
                    <Enabled>false</Enabled>
                    <Url>http://1.2.**.**:20001</Url>
                </Kiali>
                <Tracing>true</Tracing>
                <WebAssemblyFilterDeployment>
                    <Enabled>false</Enabled>
                </WebAssemblyFilterDeployment>
                <EnableLocalityLB>true</EnableLocalityLB>
                <Audit>
                    <Enabled>true</Enabled>
                    <Project>audit-project</Project>
                    <AuditProjectStatus>audit_project_not_exist</AuditProjectStatus>
                </Audit>
                <Proxy>
                    <RequestMemory>128Mi</RequestMemory>
                    <ClusterDomain>cluster.domain</ClusterDomain>
                    <LimitMemory>1024Mi</LimitMemory>
                    <RequestCPU>100m</RequestCPU>
                    <EnableDNSProxying>false</EnableDNSProxying>
                    <LimitCPU>2000m</LimitCPU>
                    <AccessLogServiceEnabled>false</AccessLogServiceEnabled>
                    <AccessLogServiceHost>0.0.0.0</AccessLogServiceHost>
                    <AccessLogServicePort>9999</AccessLogServicePort>
                    <AccessLogFormat>{"authority_for":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"}</AccessLogFormat>
                    <AccessLogFile>/dev/stdout</AccessLogFile>
                </Proxy>
                <K8sNewAPIsSupport>
                    <GatewayAPIEnabled>false</GatewayAPIEnabled>
                </K8sNewAPIsSupport>
                <LocalityLB>
                    <Enabled>false</Enabled>
                </LocalityLB>
                <ControlPlaneLogInfo>
                    <Enabled>false</Enabled>
                    <Project>mesh-log-cbeb85a09161b4a26ab73e0ac****</Project>
                </ControlPlaneLogInfo>
                <ExtraConfiguration>
                    <IstioCRHistory>
                        <EnableHistory>false</EnableHistory>
                    </IstioCRHistory>
                    <CRAggregationEnabled>false</CRAggregationEnabled>
                    <MultiBuffer>
                        <Enabled>false</Enabled>
                        <PollDelay>0.02s</PollDelay>
                    </MultiBuffer>
                    <TerminationDrainDuration>5s</TerminationDrainDuration>
                    <Lifecycle>
                        <postStart>
                            <exec>
                                <command>sleep 3s</command>
                            </exec>
                            <httpGet>
                                <port>80</port>
                                <host>127.xx.xx.1</host>
                                <scheme>http</scheme>
                                <httpHeaders>
                                    <name>key</name>
                                    <value>value</value>
                                </httpHeaders>
                            </httpGet>
                            <tcpSocket>
                                <port>888</port>
                                <host>127.xx.xx.1</host>
                            </tcpSocket>
                        </postStart>
                        <preStop>
                            <exec>
                                <command>sleep 3s</command>
                            </exec>
                            <httpGet>
                                <port>80</port>
                                <host>127.xx.xx.1</host>
                                <scheme>http</scheme>
                                <httpHeaders>
                                    <name>key</name>
                                    <value>value</value>
                                </httpHeaders>
                            </httpGet>
                            <tcpSocket>
                                <port>888</port>
                                <host>127.xx.xx.1</host>
                            </tcpSocket>
                        </preStop>
                    </Lifecycle>
                    <SidecarProxyInitResourceLimit>
                        <ResourceCPULimit>2000m</ResourceCPULimit>
                        <ResourceMemoryLimit>1024Mi</ResourceMemoryLimit>
                    </SidecarProxyInitResourceLimit>
                    <SidecarProxyInitResourceRequest>
                        <ResourceCPURequest>10m</ResourceCPURequest>
                        <ResourceMemoryRequest>10Mi</ResourceMemoryRequest>
                    </SidecarProxyInitResourceRequest>
                    <DiscoverySelectors/>
                    <RateLimit>
                        <EnableGlobalRateLimit>false</EnableGlobalRateLimit>
                    </RateLimit>
                    <OPAScopeInjection>
                        <OPAScopeInjected>false</OPAScopeInjected>
                    </OPAScopeInjection>
                    <CRAggregationConfiguration>
                        <Enabled>true</Enabled>
                    </CRAggregationConfiguration>
                    <NFDConfiguration>
                        <Enabled>true</Enabled>
                        <NFDLabelPruned>true</NFDLabelPruned>
                    </NFDConfiguration>
                    <AccessLogExtraConf>
                        <GatewayLifecycle>30</GatewayLifecycle>
                        <SidecarLifecycle>30</SidecarLifecycle>
                    </AccessLogExtraConf>
                    <AutoDiagnosis>
                        <AutoDiagnosisEnabled>true</AutoDiagnosisEnabled>
                    </AutoDiagnosis>
                    <AdaptiveXdsConfiguration>
                        <Enabled>true</Enabled>
                        <EgressResources/>
                        <EgressReplicaCount>2</EgressReplicaCount>
                        <EgressAutoscaleEnabled>true</EgressAutoscaleEnabled>
                        <EgressMinReplica>1</EgressMinReplica>
                        <EgressMaxReplica>2</EgressMaxReplica>
                        <EgressHpaCpu>
                            <TargetAverageUtilization>80</TargetAverageUtilization>
                        </EgressHpaCpu>
                        <EgressHpaMemory>
                            <TargetAverageUtilization>80</TargetAverageUtilization>
                        </EgressHpaMemory>
                    </AdaptiveXdsConfiguration>
                </ExtraConfiguration>
            </MeshConfig>
        </Spec>
        <Clusters>["caf089e56daba4c51a8906fe43ea1****","c80f45444b3da447da60a911390c2****"]</Clusters>
        <ClusterSpec>standard</ClusterSpec>
        <OwnerType>ackone</OwnerType>
        <OwnerId>cc3e96f249d124eb38b72718ec5*****</OwnerId>
    </ServiceMesh>
</DescribeServiceMeshDetailResponse>

JSON format

HTTP/1.1 200 OK
Content-Type:application/json

{
  "RequestId" : "11fd0027-c27e-41bb-a565-75583054****",
  "ServiceMesh" : {
    "Endpoints" : {
      "IntranetPilotEndpoint" : "192.168.**.**:15011",
      "PublicPilotEndpoint" : "182.92.**.**:15011",
      "IntranetApiServerEndpoint" : "https://192.168.**.**:6443",
      "PublicApiServerEndpoint" : "https://123.56.**.**:6443"
    },
    "ServiceMeshInfo" : {
      "Profile" : "Default",
      "CreationTime" : "2020-04-21T09:42:20+08:00",
      "UpdateTime" : "2020-06-03T14:48:54+08:00",
      "ErrorMessage" : " error",
      "Version" : "v1.7.4.0-gfb34ba99-aliyun",
      "State" : "running",
      "ServiceMeshId" : "c08ba3fd1e6484b0f8cc1ad8fe10d****",
      "Name" : "mesh1",
      "RegionId" : "cn-beijing"
    },
    "Spec" : {
      "Network" : {
        "VpcId" : "vpc-2zew0rajjkmxy2369****",
        "SecurityGroupId" : "sg-2ze384sxttxbctnj****",
        "VSwitches" : [ "vsw-2ze66z3ntvsej0mdo****" ]
      },
      "LoadBalancer" : {
        "PilotPublicEip" : true,
        "PilotPublicLoadbalancerId" : "lb-2zesa8qs8kbkj9jkl****",
        "ApiServerLoadbalancerId" : "lb-2zekaak10uxds44vx****",
        "ApiServerPublicEip" : true
      },
      "MeshConfig" : {
        "OPA" : {
          "RequestMemory" : "1024Mi",
          "LogLevel" : "info",
          "Enabled" : true,
          "LimitMemory" : "512Mi",
          "RequestCPU" : "2",
          "LimitCPU" : "1"
        },
        "Prometheus" : {
          "UseExternal" : false,
          "ExternalUrl" : "http://prometheus:9090"
        },
        "AccessLog" : {
          "Enabled" : true,
          "Project" : "k8s-log-b7b05d08670e41ca8c8fc0b7718f*****"
        },
        "Pilot" : {
          "Http10Enabled" : false,
          "TraceSampling" : 100,
          "Feature" : {
            "FilterGatewayClusterConfig" : false,
            "EnableSDSServer" : false
          },
          "ConfigSource" : {
            "Enabled" : false,
            "NacosID" : "mse-cn-tl326******"
          }
        },
        "MSE" : {
          "Enabled" : false
        },
        "CustomizedZipkin" : false,
        "SidecarInjector" : {
          "EnableNamespacesByDefault" : false,
          "RequestMemory" : "512Mi",
          "LimitMemory" : "2048Mi",
          "RequestCPU" : "1000m",
          "AutoInjectionPolicyEnabled" : true,
          "LimitCPU" : "4000m",
          "InitCNIConfiguration" : {
            "ExcludeNamespaces" : "kube-system,istio-system",
            "Enabled" : false
          },
          "SidecarInjectorWebhookAsYaml" : "{\"injectedAnnotations\":{\"test/istio-init\":\"runtime/default2\",\"test/istio-proxy\":\"runtime/default\"},\"replicaCount\":2,\"nodeSelector\":{\"beta.kubernetes.io/os\":\"linux\"}}",
          "SidecarInjectorNum" : 1
        },
        "IncludeIPRanges" : "192.168.0.0/16",
        "ExcludeIPRanges" : "172.16.0.0",
        "ExcludeOutboundPorts" : "80,81",
        "ExcludeInboundPorts" : "80,81",
        "Telemetry" : true,
        "Edition" : {
          "Name" : "Pro",
          "IstiodImageTag" : "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun",
          "ProxyImageTag" : "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun"
        },
        "ProtocolSupport" : {
          "MysqlFilterEnabled" : false,
          "RedisFilterEnabled" : false,
          "ThriftFilterEnabled" : false,
          "DubboFilterEnabled" : false
        },
        "OutboundTrafficPolicy" : "ALLOW_ANY",
        "Kiali" : {
          "Enabled" : false,
          "Url" : "http://1.2.**.**:20001"
        },
        "Tracing" : true,
        "WebAssemblyFilterDeployment" : {
          "Enabled" : false
        },
        "EnableLocalityLB" : true,
        "Audit" : {
          "Enabled" : true,
          "Project" : "audit-project",
          "AuditProjectStatus" : "audit_project_not_exist"
        },
        "Proxy" : {
          "RequestMemory" : "128Mi",
          "ClusterDomain" : "cluster.domain",
          "LimitMemory" : "1024Mi",
          "RequestCPU" : "100m",
          "EnableDNSProxying" : false,
          "LimitCPU" : "2000m",
          "AccessLogServiceEnabled" : false,
          "AccessLogServiceHost" : "0.0.0.0",
          "AccessLogServicePort" : 9999,
          "AccessLogFormat" : "{\"authority_for\":\"%REQ(:AUTHORITY)%\",\"bytes_received\":\"%BYTES_RECEIVED%\",\"bytes_sent\":\"%BYTES_SENT%\",\"downstream_local_address\":\"%DOWNSTREAM_LOCAL_ADDRESS%\",\"downstream_remote_address\":\"%DOWNSTREAM_REMOTE_ADDRESS%\",\"duration\":\"%DURATION%\",\"istio_policy_status\":\"%DYNAMIC_METADATA(istio.mixer:status)%\",\"method\":\"%REQ(:METHOD)%\",\"path\":\"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%\",\"protocol\":\"%PROTOCOL%\",\"request_id\":\"%REQ(X-REQUEST-ID)%\",\"requested_server_name\":\"%REQUESTED_SERVER_NAME%\",\"response_code\":\"%RESPONSE_CODE%\",\"response_flags\":\"%RESPONSE_FLAGS%\",\"route_name\":\"%ROUTE_NAME%\",\"start_time\":\"%START_TIME%\",\"trace_id\":\"%REQ(X-B3-TRACEID)%\",\"upstream_cluster\":\"%UPSTREAM_CLUSTER%\",\"upstream_host\":\"%UPSTREAM_HOST%\",\"upstream_local_address\":\"%UPSTREAM_LOCAL_ADDRESS%\",\"upstream_service_time\":\"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%\",\"upstream_transport_failure_reason\":\"%UPSTREAM_TRANSPORT_FAILURE_REASON%\",\"user_agent\":\"%REQ(USER-AGENT)%\",\"x_forwarded_for\":\"%REQ(X-FORWARDED-FOR)%\"}",
          "AccessLogFile" : "/dev/stdout"
        },
        "K8sNewAPIsSupport" : {
          "GatewayAPIEnabled" : false
        },
        "LocalityLB" : {
          "Enabled" : false
        },
        "ControlPlaneLogInfo" : {
          "Enabled" : false,
          "Project" : "mesh-log-cbeb85a09161b4a26ab73e0ac****"
        },
        "ExtraConfiguration" : {
          "IstioCRHistory" : {
            "EnableHistory" : false
          },
          "CRAggregationEnabled" : false,
          "MultiBuffer" : {
            "Enabled" : false,
            "PollDelay" : "0.02s"
          },
          "TerminationDrainDuration" : "5s",
          "Lifecycle" : {
            "postStart" : {
              "exec" : {
                "command" : [ "sleep 3s" ]
              },
              "httpGet" : {
                "port" : "80",
                "host" : "127.xx.xx.1",
                "scheme" : "http",
                "httpHeaders" : [ {
                  "name" : "key",
                  "value" : "value"
                } ]
              },
              "tcpSocket" : {
                "port" : "888",
                "host" : "127.xx.xx.1"
              }
            },
            "preStop" : {
              "exec" : {
                "command" : [ "sleep 3s" ]
              },
              "httpGet" : {
                "port" : "80",
                "host" : "127.xx.xx.1",
                "scheme" : "http",
                "httpHeaders" : [ {
                  "name" : "key",
                  "value" : "value"
                } ]
              },
              "tcpSocket" : {
                "port" : "888",
                "host" : "127.xx.xx.1"
              }
            }
          },
          "SidecarProxyInitResourceLimit" : {
            "ResourceCPULimit" : "2000m",
            "ResourceMemoryLimit" : "1024Mi"
          },
          "SidecarProxyInitResourceRequest" : {
            "ResourceCPURequest" : "10m",
            "ResourceMemoryRequest" : "10Mi"
          },
          "DiscoverySelectors" : [ null ],
          "RateLimit" : {
            "EnableGlobalRateLimit" : false
          },
          "OPAScopeInjection" : {
            "OPAScopeInjected" : false
          },
          "CRAggregationConfiguration" : {
            "Enabled" : true
          },
          "NFDConfiguration" : {
            "Enabled" : true,
            "NFDLabelPruned" : true
          },
          "AccessLogExtraConf" : {
            "GatewayLifecycle" : 30,
            "SidecarLifecycle" : 30
          },
          "AutoDiagnosis" : {
            "AutoDiagnosisEnabled" : true
          },
          "AdaptiveXdsConfiguration" : {
            "Enabled" : true,
            "EgressResources" : { },
            "EgressReplicaCount" : 2,
            "EgressAutoscaleEnabled" : true,
            "EgressMinReplica" : 1,
            "EgressMaxReplica" : 2,
            "EgressHpaCpu" : {
              "TargetAverageUtilization" : 80
            },
            "EgressHpaMemory" : {
              "TargetAverageUtilization" : 80
            }
          }
        }
      }
    },
    "Clusters" : [ "[\"caf089e56daba4c51a8906fe43ea1****\",\"c80f45444b3da447da60a911390c2****\"]" ],
    "ClusterSpec" : "standard",
    "OwnerType" : "ackone",
    "OwnerId" : "cc3e96f249d124eb38b72718ec5*****"
  }
}

Error codes

For a list of error codes, see Service error codes.