Queries the details of an Alibaba Cloud Service Mesh (ASM) instance.
Debugging
Request parameters
| Parameter | Type | Required | Example | Description |
|---|---|---|---|---|
| Action | String | Yes | DescribeServiceMeshDetail | The operation that you want to perform. Set the value to DescribeServiceMeshDetail. |
| ServiceMeshId | String | Yes | c08ba3fd1e6484b0f8cc1ad8fe10d**** | The ID of the ASM instance. |
Response parameters
| Parameter | Type | Example | Description |
|---|---|---|---|
| RequestId | String | 11fd0027-c27e-41bb-a565-75583054**** | The ID of the request. |
| ServiceMesh | Object | The details of the ASM instance. | |
| Endpoints | Object | The endpoints of the ASM instance. | |
| IntranetPilotEndpoint | String | 192.168.**.**:15011 | The endpoint that is used to access Istio Pilot from the internal network. |
| PublicPilotEndpoint | String | 182.92.**.**:15011 | The endpoint that is used to expose Istio Pilot to the Internet. |
| IntranetApiServerEndpoint | String | https://192.168.**.**:6443 | The endpoint that is used to access the API server from the internal network. |
| PublicApiServerEndpoint | String | https://123.56.**.**:6443 | The endpoint that is used to expose the API server to the Internet. |
| ServiceMeshInfo | Object | The basic information about the ASM instance. | |
| Profile | String | Default | The edition of the ASM instance. Valid values:
|
| CreationTime | String | 2020-04-21T09:42:20+08:00 | The time when the ASM instance was created. |
| UpdateTime | String | 2020-06-03T14:48:54+08:00 | The time when the ASM instance was last modified. |
| ErrorMessage | String | error | The error message that is returned when the call failed. |
| Version | String | v1.7.4.0-gfb34ba99-aliyun | The version of the ASM instance. |
| State | String | running | The status of the ASM instance. |
| ServiceMeshId | String | c08ba3fd1e6484b0f8cc1ad8fe10d**** | The ID of the ASM instance. |
| Name | String | mesh1 | The name of the ASM instance. |
| RegionId | String | cn-beijing | The ID of the region in which the ASM instance resides. |
| Spec | Object | The specifications of the ASM instance. | |
| Network | Object | The network configurations of the ASM instance. | |
| VpcId | String | vpc-2zew0rajjkmxy2369**** | The ID of the virtual private cloud (VPC). |
| SecurityGroupId | String | sg-2ze384sxttxbctnj**** | The ID of the security group. |
| VSwitches | Array of String | vsw-2ze66z3ntvsej0mdo**** | The ID of the vSwitch. |
| LoadBalancer | Object | The information about load balancing. | |
| PilotPublicEip | Boolean | true | Indicates whether Istio Pilot is exposed to the Internet. Valid values:
|
| PilotPublicLoadbalancerId | String | lb-2zesa8qs8kbkj9jkl**** | The ID of the Server Load Balancer (SLB) instance that is used when Istio Pilot is exposed to the Internet. |
| ApiServerLoadbalancerId | String | lb-2zekaak10uxds44vx**** | The ID of the SLB instance that is used when the API server is exposed to the Internet. |
| ApiServerPublicEip | Boolean | true | Indicates whether the API server is exposed to the Internet. Valid values:
|
| MeshConfig | Object | The configurations of the ASM instance. | |
| OPA | Object | The information about the Open Policy Agent (OPA) plug-in. | |
| RequestMemory | String | 1024Mi | The size of the memory that is requested by the OPA proxy container. |
| LogLevel | String | info | The level of the logs to be generated for OPA. |
| Enabled | Boolean | true | Indicates whether the OPA plug-in is installed. Valid values:
|
| LimitMemory | String | 512Mi | The maximum size of the memory that is available to the OPA proxy container. |
| RequestCPU | String | 2 | The number of CPU cores that are requested by the OPA proxy container. |
| LimitCPU | String | 1 | The maximum number of CPU cores that are available to the OPA proxy container. |
| Prometheus | Object | The configurations of Prometheus monitoring. | |
| UseExternal | Boolean | false | Indicates whether a custom Prometheus instance is used. Valid values:
|
| ExternalUrl | String | http://prometheus:9090 | The endpoint of Prometheus monitoring. If you use a custom Prometheus instance, this parameter is populated by the system. |
| AccessLog | Object | The configurations of access log collection. | |
| Enabled | Boolean | true | Indicates whether access log collection is enabled. Valid values:
|
| Project | String | k8s-log-b7b05d08670e41ca8c8fc0b7718f***** | The name of the Log Service project that stores access logs. |
| Pilot | Object | The Pilot configurations. | |
| Http10Enabled | Boolean | false | Indicates whether HTTP/1.0 is supported. Valid values:
|
| TraceSampling | Float | 100 | The sampling percentage of tracing analysis. |
| Feature | Object | The configurations of Pilot features. | |
| FilterGatewayClusterConfig | Boolean | false | Indicates whether gateway configuration filtering is enabled. Valid values:
|
| EnableSDSServer | Boolean | false | Indicates whether Secret Discovery Service (SDS) is enabled. Valid values:
|
| ConfigSource | Object | The configurations of communication between external services and services in the mesh. | |
| Enabled | Boolean | false | Indicates whether communication is allowed between external services and services in the mesh. Valid values:
|
| NacosID | String | mse-cn-tl326****** | The ID of the Nacos instance that provides external service information. |
| MSE | Object | The configurations of Microservices Engine (MSE). | |
| Enabled | Boolean | false | Indicates whether MSE is enabled. Valid values:
|
| CustomizedZipkin | Boolean | false | Indicates whether a custom Zipkin system is used. Valid values:
|
| SidecarInjector | Object | The configurations of the sidecar injector. | |
| EnableNamespacesByDefault | Boolean | false | Indicates whether automatic sidecar injection is enabled for all namespaces. Valid values:
|
| RequestMemory | String | 512Mi | The size of the memory that is requested by the sidecar injector pod. |
| LimitMemory | String | 2048Mi | The maximum size of the memory that is available to the sidecar injector pod. |
| RequestCPU | String | 1000m | The number of CPU cores that are requested by the sidecar injector pod. |
| AutoInjectionPolicyEnabled | Boolean | true | Indicates whether automatic sidecar injection can be enabled by using pod annotations. Valid values:
|
| LimitCPU | String | 4000m | The maximum number of CPU cores that are available to the sidecar injector pod. |
| InitCNIConfiguration | Object | The configurations of Container Network Interface (CNI). | |
| ExcludeNamespaces | String | kube-system,istio-system | The namespaces to exclude. The CNI plug-in ignores pods in the excluded namespaces. |
| Enabled | Boolean | false | Indicates whether the CNI plug-in is enabled. Valid values:
|
| SidecarInjectorWebhookAsYaml | String | {"injectedAnnotations":{"test/istio-init":"runtime/default2","test/istio-proxy":"runtime/default"},"replicaCount":2,"nodeSelector":{"beta.kubernetes.io/os":"linux"}} | Other configurations of automatic sidecar injection, in the YAML format. For more information, see Enable automatic sidecar injection by using multiple methods. |
| SidecarInjectorNum | Integer | 1 | The number of component replicas that are used for sidecar injection. Default value: |
| IncludeIPRanges | String | 192.168.0.0/16 | The IP ranges in CIDR form to redirect to the sidecar proxies in the ASM instance. |
| ExcludeIPRanges | String | 172.16.0.0 | The IP ranges in CIDR form to be excluded from redirection to sidecar proxies in the ASM instance. |
| ExcludeOutboundPorts | String | 80,81 | The outbound ports to be excluded from redirection to sidecar proxies in the ASM instance. |
| ExcludeInboundPorts | String | 80,81 | The inbound ports to be excluded from redirection to sidecar proxies in the ASM instance. |
| Telemetry | Boolean | true | Indicates whether Prometheus monitoring is enabled. We recommend that you use Prometheus Service of Application Real-Time Monitoring Service (ARMS). Valid values:
|
| Edition | Object | The information about the edition. | |
| Name | String | Pro | The name of the edition. |
| IstiodImageTag | String | v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun | The version of the Istiod image. |
| ProxyImageTag | String | v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun | The version of the Istio Proxy image. |
| ProtocolSupport | Object | The configurations of protocol support. | |
| MysqlFilterEnabled | Boolean | false | Indicates whether MySQL Filter is enabled. Valid values:
|
| RedisFilterEnabled | Boolean | false | Indicates whether Redis Filter is enabled. Valid values:
|
| ThriftFilterEnabled | Boolean | false | Indicates whether Thrift Filter is enabled. Valid values:
|
| DubboFilterEnabled | Boolean | false | Indicates whether Dubbo Filter is enabled. Valid values:
|
| OutboundTrafficPolicy | String | ALLOW_ANY | The outbound traffic policy. Valid values:
|
| Kiali | Object | The configurations of mesh topology. | |
| Enabled | Boolean | false | Indicates whether mesh topology is enabled. Mesh topology can be enabled only when Prometheus monitoring is enabled. If Prometheus monitoring is disabled, you must set this parameter to
|
| Url | String | http://1.2.**.**:20001 | The endpoint of the mesh topology service. |
| Tracing | Boolean | true | Indicates whether tracing analysis is enabled. This feature can be enabled only after Tracing Analysis is activated. Valid values:
|
| WebAssemblyFilterDeployment | Object | The configurations of WebAssembly Filter. | |
| Enabled | Boolean | false | Indicates whether WebAssembly Filter is enabled. Valid values:
|
| EnableLocalityLB | Boolean | true | Indicates whether the feature that routes traffic to the nearest instance is enabled. Valid values:
|
| Audit | Object | The information about mesh audit. | |
| Enabled | Boolean | true | Indicates whether mesh audit is enabled. Valid values:
|
| Project | String | audit-project | The name of the Log Service project that is used for mesh audit. |
| AuditProjectStatus | String | audit_project_not_exist | Indicates whether an audit project exists in the ASM instance. Valid values:
|
| Proxy | Object | The proxy configurations. | |
| RequestMemory | String | 128Mi | The size of the memory that is requested. |
| ClusterDomain | String | cluster.domain | The trusted domain. |
| LimitMemory | String | 1024Mi | The maximum size of the memory. |
| RequestCPU | String | 100m | The number of CPU cores that are requested. |
| EnableDNSProxying | Boolean | false | Indicates whether the Domain Name System (DNS) proxy feature is enabled. Valid values: Valid values:
|
| LimitCPU | String | 2000m | The maximum number of CPU cores. |
| AccessLogServiceEnabled | Boolean | false | Indicates whether gRPC Access Log Service (ALS) for Envoy is enabled. Valid values:
|
| AccessLogServiceHost | String | 0.0.0.0 | The endpoint of gRPC ALS for Envoy. |
| AccessLogServicePort | Integer | 9999 | The port of gRPC ALS for Envoy. |
| AccessLogFormat | String | {"authority_for":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"} | The format of the access logs of sidecar proxies. |
| AccessLogFile | String | /dev/stdout | The path to the file that stores the access logs of sidecar proxies. |
| K8sNewAPIsSupport | Object | The information about the Kubernetes API. | |
| GatewayAPIEnabled | Boolean | false | Indicates whether Gateway API is enabled. Valid values:
|
| LocalityLB | Object | The configurations of cross-region load balancing. | |
| Enabled | Boolean | false | Indicates whether cross-region load balancing is enabled. Valid values:
|
| Failover | Map | The configurations of cross-region failover. Note Only one of Failover and Distribute parameters can be set. If you set the Failover parameter, you cannot set the Distribute parameter. | |
| Distribute | Map | The configurations of cross-region traffic distribution. Note Only one of Failover and Distribute parameters can be set. If you set the Distribute parameter, you cannot set the Failover parameter. | |
| ControlPlaneLogInfo | Object | The configurations of control-plane log collection. | |
| Enabled | Boolean | false | Indicates whether the collection of control-plane logs is enabled. Valid values:
|
| Project | String | mesh-log-cbeb85a09161b4a26ab73e0ac**** | The name of the Log Service project that stores control-plane logs. |
| ExtraConfiguration | Object | The configurations of additional features for the ASM instance. | |
| IstioCRHistory | Object | The configurations of the rollback feature for Istio resources. | |
| EnableHistory | Boolean | false | Indicates whether the rollback feature for Istio resources is enabled. Valid values:
|
| CRAggregationEnabled | Boolean | false | Indicates whether the Kubernetes API of clusters on the data plane can be used to access Istio resources. Valid values:
|
| MultiBuffer | Object | The information about Transport Layer Security (TLS) acceleration based on MulitiBuffer. | |
| Enabled | Boolean | false | Indicates whether MulitiBuffer-based TLS acceleration is enabled. Valid values:
|
| PollDelay | String | 0.02s | The pull-request latency. |
| TerminationDrainDuration | String | 5s | The maximum period of time that Istio Proxy waits for a request to end. |
| Lifecycle | Object | The lifecycle of Istio Proxy. | |
| postStart | Object | The post-start parameters. | |
| exec | Object | The post-start script. | |
| command | Array of String | sleep 3s | The executed command. |
| httpGet | Object | The HTTP GET request that is sent before the instance stops. | |
| port | String | 80 | The port number of the request. |
| host | String | 127.xx.xx.1 | The URL of the request. |
| scheme | String | http | The request method. Valid values: |
| httpHeaders | Array of httpHeaders | The HTTP request headers. | |
| name | String | key | The name of the HTTP request header. |
| value | String | value | The value of the HTTP request header field. |
| tcpSocket | Object | The TCP socket request that is sent. | |
| port | String | 888 | The port number of the TCP socket request. |
| host | String | 127.xx.xx.1 | The URL of the TCP socket request. |
| preStop | Object | The pre-close parameters. | |
| exec | Object | The pre-close script. | |
| command | Array of String | sleep 3s | The executed command. |
| httpGet | Object | The HTTP GET request that is sent before the instance stops. | |
| port | String | 80 | The port number of the request. |
| host | String | 127.xx.xx.1 | The URL of the request. |
| scheme | String | http | The request method. Valid values: |
| httpHeaders | Array of httpHeaders | The HTTP request headers. | |
| name | String | key | The name of the HTTP request header. |
| value | String | value | The value of the HTTP request header field. |
| tcpSocket | Object | The TCP socket request that is sent. | |
| port | String | 888 | The port number of the request. |
| host | String | 127.xx.xx.1 | The URL of the request. |
| SidecarProxyInitResourceLimit | Object | The resource limits on the istio-init container. | |
| ResourceCPULimit | String | 2000m | The maximum number of CPU cores that are available to the istio-init container. |
| ResourceMemoryLimit | String | 1024Mi | The maximum size of the memory that is available to the istio-init container. |
| SidecarProxyInitResourceRequest | Object | The resources that are requested by the istio-init container. | |
| ResourceCPURequest | String | 10m | The number of CPU cores that are requested by the istio-init container. |
| ResourceMemoryRequest | String | 10Mi | The size of the memory that is requested by the istio-init container. |
| DiscoverySelectors | Array of Object | [{"matchExpressions":[{"key":"asm-discovery","operator":"Exists"}]}] | The label selectors used to specify namespaces on the data plane. The control plane discovers and process only application services in the specified namespaces. |
| RateLimit | Object | The configurations of Application High Availability Service (AHAS)-based throttling. | |
| EnableGlobalRateLimit | Boolean | false | Indicates whether AHAS-based throttling is enabled. Valid values:
|
| OPAScopeInjection | Object | The configurations of the feature of controlling the OPA injection scope. | |
| OPAScopeInjected | Boolean | false | Indicates whether the feature of controlling the OPA injection scope is enabled. Valid values:
|
| CRAggregationConfiguration | Object | Access to Istio resources by using the Kubernetes API on the data plane. | |
| Enabled | Boolean | true | Indicates whether Istio resources can be accessed by using the Kubernetes API on the data plane. |
| NFDConfiguration | Object | The configurations of Node Feature Discovery (NFD). | |
| Enabled | Boolean | true | Indicates whether NFD is enabled. |
| NFDLabelPruned | Boolean | true | Indicates whether feature labels on nodes are cleared when NFD is disabled. |
| AccessLogExtraConf | Object | The configurations of additional features for access log collection | |
| GatewayLifecycle | Integer | 30 | The retention period for the access logs of the ingress gateway. Unit: day. The logs are collected by using the Log Service. For example, a value of 30 indicates that the logs are retained for 30 days. |
| SidecarLifecycle | Integer | 30 | The retention period for the access logs of sidecar proxies. Unit: day. The logs are collected by using the Log Service. For example, a value of 30 indicates that the logs are retained for 30 days. |
| AutoDiagnosis | Object | The configurations of automatic diagnosis for the ASM instance. | |
| AutoDiagnosisEnabled | Boolean | true | Indicates whether automatic diagnosis is enabled for the ASM instance. If you enable this feature, the ASM instance is automatically diagnosed five minutes after you modify an Istio resource. |
| AdaptiveXdsConfiguration | Object | The configurations of adaptive xDS optimization. | |
| Enabled | Boolean | true | Indicates whether adaptive xDS optimization is enabled. |
| EgressResources | Object | The resource configurations of the egress gateway that is used by adaptive xDS optimization. | |
| Requests | Map | The resources that are requested by the egress gateway. | |
| Limits | Map | The resources that are available to the egress gateway. | |
| EgressReplicaCount | Integer | 2 | The number of the egress gateway pod replicas. |
| EgressAutoscaleEnabled | Boolean | true | Indicates whether Horizontal Pod Autoscaling (HPA) is enabled for the egress gateway. |
| EgressMinReplica | Integer | 1 | The minimum number of egress gateway pod replicas when HPA is enabled. |
| EgressMaxReplica | Integer | 2 | The maximum number of egress gateway pod replicas when HPA is enabled. |
| EgressHpaCpu | Object | The CPU resource configurations of the egress gateway when HPA is enabled. | |
| TargetAverageUtilization | Integer | 80 | The expected CPU utilization when HPA is enabled. Valid values: 1 to 100. If the CPU utilization exceeds this value, the number of pod replicas increases. If the CPU utilization is less than this value, the number of pod replicas decreases. |
| EgressHpaMemory | Object | The memory resource configurations of the egress gateway when HPA is enabled. | |
| TargetAverageUtilization | Integer | 80 | The expected memory usage when HPA is enabled. Valid values: 1 to 100. If the memory usage exceeds this value, the number of pod replicas increases. If the memory usage is less than this value, the number of pod replicas decreases. |
| Clusters | Array of String | ["caf089e56daba4c51a8906fe43ea1****","c80f45444b3da447da60a911390c2****"] | The list of clusters. |
| ClusterSpec | String | standard | The specification of the ASM instance. Valid values:
|
| OwnerType | String | ackone | The Alibaba Cloud service for which the ASM instance is created. Valid values:
|
| OwnerId | String | cc3e96f249d124eb38b72718ec5***** | The ID of the Alibaba Cloud service instance for which the ASM instance is created. |
Examples
Sample requests
http(s)://[Endpoint]/?Action=DescribeServiceMeshDetail
&ServiceMeshId=c08ba3fd1e6484b0f8cc1ad8fe10d****
&Common request parametersSample success responses
XML format
HTTP/1.1 200 OK
Content-Type:application/xml
<DescribeServiceMeshDetailResponse>
<RequestId>11fd0027-c27e-41bb-a565-75583054****</RequestId>
<ServiceMesh>
<Endpoints>
<IntranetPilotEndpoint>192.168.**.**:15011</IntranetPilotEndpoint>
<PublicPilotEndpoint>182.92.**.**:15011</PublicPilotEndpoint>
<IntranetApiServerEndpoint>https://192.168.**.**:6443</IntranetApiServerEndpoint>
<PublicApiServerEndpoint>https://123.56.**.**:6443</PublicApiServerEndpoint>
</Endpoints>
<ServiceMeshInfo>
<Profile>Default</Profile>
<CreationTime>2020-04-21T09:42:20+08:00</CreationTime>
<UpdateTime>2020-06-03T14:48:54+08:00</UpdateTime>
<ErrorMessage> error</ErrorMessage>
<Version>v1.7.4.0-gfb34ba99-aliyun</Version>
<State>running</State>
<ServiceMeshId>c08ba3fd1e6484b0f8cc1ad8fe10d****</ServiceMeshId>
<Name>mesh1</Name>
<RegionId>cn-beijing</RegionId>
</ServiceMeshInfo>
<Spec>
<Network>
<VpcId>vpc-2zew0rajjkmxy2369****</VpcId>
<SecurityGroupId>sg-2ze384sxttxbctnj****</SecurityGroupId>
<VSwitches>vsw-2ze66z3ntvsej0mdo****</VSwitches>
</Network>
<LoadBalancer>
<PilotPublicEip>true</PilotPublicEip>
<PilotPublicLoadbalancerId>lb-2zesa8qs8kbkj9jkl****</PilotPublicLoadbalancerId>
<ApiServerLoadbalancerId>lb-2zekaak10uxds44vx****</ApiServerLoadbalancerId>
<ApiServerPublicEip>true</ApiServerPublicEip>
</LoadBalancer>
<MeshConfig>
<OPA>
<RequestMemory>1024Mi</RequestMemory>
<LogLevel>info</LogLevel>
<Enabled>true</Enabled>
<LimitMemory>512Mi</LimitMemory>
<RequestCPU>2</RequestCPU>
<LimitCPU>1</LimitCPU>
</OPA>
<Prometheus>
<UseExternal>false</UseExternal>
<ExternalUrl>http://prometheus:9090</ExternalUrl>
</Prometheus>
<AccessLog>
<Enabled>true</Enabled>
<Project>k8s-log-b7b05d08670e41ca8c8fc0b7718f*****</Project>
</AccessLog>
<Pilot>
<Http10Enabled>false</Http10Enabled>
<TraceSampling>100</TraceSampling>
<Feature>
<FilterGatewayClusterConfig>false</FilterGatewayClusterConfig>
<EnableSDSServer>false</EnableSDSServer>
</Feature>
<ConfigSource>
<Enabled>false</Enabled>
<NacosID>mse-cn-tl326******</NacosID>
</ConfigSource>
</Pilot>
<MSE>
<Enabled>false</Enabled>
</MSE>
<CustomizedZipkin>false</CustomizedZipkin>
<SidecarInjector>
<EnableNamespacesByDefault>false</EnableNamespacesByDefault>
<RequestMemory>512Mi</RequestMemory>
<LimitMemory>2048Mi</LimitMemory>
<RequestCPU>1000m</RequestCPU>
<AutoInjectionPolicyEnabled>true</AutoInjectionPolicyEnabled>
<LimitCPU>4000m</LimitCPU>
<InitCNIConfiguration>
<ExcludeNamespaces>kube-system,istio-system</ExcludeNamespaces>
<Enabled>false</Enabled>
</InitCNIConfiguration>
<SidecarInjectorWebhookAsYaml>{"injectedAnnotations":{"test/istio-init":"runtime/default2","test/istio-proxy":"runtime/default"},"replicaCount":2,"nodeSelector":{"beta.kubernetes.io/os":"linux"}}</SidecarInjectorWebhookAsYaml>
<SidecarInjectorNum>1</SidecarInjectorNum>
</SidecarInjector>
<IncludeIPRanges>192.168.0.0/16</IncludeIPRanges>
<ExcludeIPRanges>172.16.0.0</ExcludeIPRanges>
<ExcludeOutboundPorts>80,81</ExcludeOutboundPorts>
<ExcludeInboundPorts>80,81</ExcludeInboundPorts>
<Telemetry>true</Telemetry>
<Edition>
<Name>Pro</Name>
<IstiodImageTag>v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun</IstiodImageTag>
<ProxyImageTag>v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun</ProxyImageTag>
</Edition>
<ProtocolSupport>
<MysqlFilterEnabled>false</MysqlFilterEnabled>
<RedisFilterEnabled>false</RedisFilterEnabled>
<ThriftFilterEnabled>false</ThriftFilterEnabled>
<DubboFilterEnabled>false</DubboFilterEnabled>
</ProtocolSupport>
<OutboundTrafficPolicy>ALLOW_ANY</OutboundTrafficPolicy>
<Kiali>
<Enabled>false</Enabled>
<Url>http://1.2.**.**:20001</Url>
</Kiali>
<Tracing>true</Tracing>
<WebAssemblyFilterDeployment>
<Enabled>false</Enabled>
</WebAssemblyFilterDeployment>
<EnableLocalityLB>true</EnableLocalityLB>
<Audit>
<Enabled>true</Enabled>
<Project>audit-project</Project>
<AuditProjectStatus>audit_project_not_exist</AuditProjectStatus>
</Audit>
<Proxy>
<RequestMemory>128Mi</RequestMemory>
<ClusterDomain>cluster.domain</ClusterDomain>
<LimitMemory>1024Mi</LimitMemory>
<RequestCPU>100m</RequestCPU>
<EnableDNSProxying>false</EnableDNSProxying>
<LimitCPU>2000m</LimitCPU>
<AccessLogServiceEnabled>false</AccessLogServiceEnabled>
<AccessLogServiceHost>0.0.0.0</AccessLogServiceHost>
<AccessLogServicePort>9999</AccessLogServicePort>
<AccessLogFormat>{"authority_for":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"}</AccessLogFormat>
<AccessLogFile>/dev/stdout</AccessLogFile>
</Proxy>
<K8sNewAPIsSupport>
<GatewayAPIEnabled>false</GatewayAPIEnabled>
</K8sNewAPIsSupport>
<LocalityLB>
<Enabled>false</Enabled>
</LocalityLB>
<ControlPlaneLogInfo>
<Enabled>false</Enabled>
<Project>mesh-log-cbeb85a09161b4a26ab73e0ac****</Project>
</ControlPlaneLogInfo>
<ExtraConfiguration>
<IstioCRHistory>
<EnableHistory>false</EnableHistory>
</IstioCRHistory>
<CRAggregationEnabled>false</CRAggregationEnabled>
<MultiBuffer>
<Enabled>false</Enabled>
<PollDelay>0.02s</PollDelay>
</MultiBuffer>
<TerminationDrainDuration>5s</TerminationDrainDuration>
<Lifecycle>
<postStart>
<exec>
<command>sleep 3s</command>
</exec>
<httpGet>
<port>80</port>
<host>127.xx.xx.1</host>
<scheme>http</scheme>
<httpHeaders>
<name>key</name>
<value>value</value>
</httpHeaders>
</httpGet>
<tcpSocket>
<port>888</port>
<host>127.xx.xx.1</host>
</tcpSocket>
</postStart>
<preStop>
<exec>
<command>sleep 3s</command>
</exec>
<httpGet>
<port>80</port>
<host>127.xx.xx.1</host>
<scheme>http</scheme>
<httpHeaders>
<name>key</name>
<value>value</value>
</httpHeaders>
</httpGet>
<tcpSocket>
<port>888</port>
<host>127.xx.xx.1</host>
</tcpSocket>
</preStop>
</Lifecycle>
<SidecarProxyInitResourceLimit>
<ResourceCPULimit>2000m</ResourceCPULimit>
<ResourceMemoryLimit>1024Mi</ResourceMemoryLimit>
</SidecarProxyInitResourceLimit>
<SidecarProxyInitResourceRequest>
<ResourceCPURequest>10m</ResourceCPURequest>
<ResourceMemoryRequest>10Mi</ResourceMemoryRequest>
</SidecarProxyInitResourceRequest>
<DiscoverySelectors/>
<RateLimit>
<EnableGlobalRateLimit>false</EnableGlobalRateLimit>
</RateLimit>
<OPAScopeInjection>
<OPAScopeInjected>false</OPAScopeInjected>
</OPAScopeInjection>
<CRAggregationConfiguration>
<Enabled>true</Enabled>
</CRAggregationConfiguration>
<NFDConfiguration>
<Enabled>true</Enabled>
<NFDLabelPruned>true</NFDLabelPruned>
</NFDConfiguration>
<AccessLogExtraConf>
<GatewayLifecycle>30</GatewayLifecycle>
<SidecarLifecycle>30</SidecarLifecycle>
</AccessLogExtraConf>
<AutoDiagnosis>
<AutoDiagnosisEnabled>true</AutoDiagnosisEnabled>
</AutoDiagnosis>
<AdaptiveXdsConfiguration>
<Enabled>true</Enabled>
<EgressResources/>
<EgressReplicaCount>2</EgressReplicaCount>
<EgressAutoscaleEnabled>true</EgressAutoscaleEnabled>
<EgressMinReplica>1</EgressMinReplica>
<EgressMaxReplica>2</EgressMaxReplica>
<EgressHpaCpu>
<TargetAverageUtilization>80</TargetAverageUtilization>
</EgressHpaCpu>
<EgressHpaMemory>
<TargetAverageUtilization>80</TargetAverageUtilization>
</EgressHpaMemory>
</AdaptiveXdsConfiguration>
</ExtraConfiguration>
</MeshConfig>
</Spec>
<Clusters>["caf089e56daba4c51a8906fe43ea1****","c80f45444b3da447da60a911390c2****"]</Clusters>
<ClusterSpec>standard</ClusterSpec>
<OwnerType>ackone</OwnerType>
<OwnerId>cc3e96f249d124eb38b72718ec5*****</OwnerId>
</ServiceMesh>
</DescribeServiceMeshDetailResponse>JSON format
HTTP/1.1 200 OK
Content-Type:application/json
{
"RequestId" : "11fd0027-c27e-41bb-a565-75583054****",
"ServiceMesh" : {
"Endpoints" : {
"IntranetPilotEndpoint" : "192.168.**.**:15011",
"PublicPilotEndpoint" : "182.92.**.**:15011",
"IntranetApiServerEndpoint" : "https://192.168.**.**:6443",
"PublicApiServerEndpoint" : "https://123.56.**.**:6443"
},
"ServiceMeshInfo" : {
"Profile" : "Default",
"CreationTime" : "2020-04-21T09:42:20+08:00",
"UpdateTime" : "2020-06-03T14:48:54+08:00",
"ErrorMessage" : " error",
"Version" : "v1.7.4.0-gfb34ba99-aliyun",
"State" : "running",
"ServiceMeshId" : "c08ba3fd1e6484b0f8cc1ad8fe10d****",
"Name" : "mesh1",
"RegionId" : "cn-beijing"
},
"Spec" : {
"Network" : {
"VpcId" : "vpc-2zew0rajjkmxy2369****",
"SecurityGroupId" : "sg-2ze384sxttxbctnj****",
"VSwitches" : [ "vsw-2ze66z3ntvsej0mdo****" ]
},
"LoadBalancer" : {
"PilotPublicEip" : true,
"PilotPublicLoadbalancerId" : "lb-2zesa8qs8kbkj9jkl****",
"ApiServerLoadbalancerId" : "lb-2zekaak10uxds44vx****",
"ApiServerPublicEip" : true
},
"MeshConfig" : {
"OPA" : {
"RequestMemory" : "1024Mi",
"LogLevel" : "info",
"Enabled" : true,
"LimitMemory" : "512Mi",
"RequestCPU" : "2",
"LimitCPU" : "1"
},
"Prometheus" : {
"UseExternal" : false,
"ExternalUrl" : "http://prometheus:9090"
},
"AccessLog" : {
"Enabled" : true,
"Project" : "k8s-log-b7b05d08670e41ca8c8fc0b7718f*****"
},
"Pilot" : {
"Http10Enabled" : false,
"TraceSampling" : 100,
"Feature" : {
"FilterGatewayClusterConfig" : false,
"EnableSDSServer" : false
},
"ConfigSource" : {
"Enabled" : false,
"NacosID" : "mse-cn-tl326******"
}
},
"MSE" : {
"Enabled" : false
},
"CustomizedZipkin" : false,
"SidecarInjector" : {
"EnableNamespacesByDefault" : false,
"RequestMemory" : "512Mi",
"LimitMemory" : "2048Mi",
"RequestCPU" : "1000m",
"AutoInjectionPolicyEnabled" : true,
"LimitCPU" : "4000m",
"InitCNIConfiguration" : {
"ExcludeNamespaces" : "kube-system,istio-system",
"Enabled" : false
},
"SidecarInjectorWebhookAsYaml" : "{\"injectedAnnotations\":{\"test/istio-init\":\"runtime/default2\",\"test/istio-proxy\":\"runtime/default\"},\"replicaCount\":2,\"nodeSelector\":{\"beta.kubernetes.io/os\":\"linux\"}}",
"SidecarInjectorNum" : 1
},
"IncludeIPRanges" : "192.168.0.0/16",
"ExcludeIPRanges" : "172.16.0.0",
"ExcludeOutboundPorts" : "80,81",
"ExcludeInboundPorts" : "80,81",
"Telemetry" : true,
"Edition" : {
"Name" : "Pro",
"IstiodImageTag" : "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun",
"ProxyImageTag" : "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun"
},
"ProtocolSupport" : {
"MysqlFilterEnabled" : false,
"RedisFilterEnabled" : false,
"ThriftFilterEnabled" : false,
"DubboFilterEnabled" : false
},
"OutboundTrafficPolicy" : "ALLOW_ANY",
"Kiali" : {
"Enabled" : false,
"Url" : "http://1.2.**.**:20001"
},
"Tracing" : true,
"WebAssemblyFilterDeployment" : {
"Enabled" : false
},
"EnableLocalityLB" : true,
"Audit" : {
"Enabled" : true,
"Project" : "audit-project",
"AuditProjectStatus" : "audit_project_not_exist"
},
"Proxy" : {
"RequestMemory" : "128Mi",
"ClusterDomain" : "cluster.domain",
"LimitMemory" : "1024Mi",
"RequestCPU" : "100m",
"EnableDNSProxying" : false,
"LimitCPU" : "2000m",
"AccessLogServiceEnabled" : false,
"AccessLogServiceHost" : "0.0.0.0",
"AccessLogServicePort" : 9999,
"AccessLogFormat" : "{\"authority_for\":\"%REQ(:AUTHORITY)%\",\"bytes_received\":\"%BYTES_RECEIVED%\",\"bytes_sent\":\"%BYTES_SENT%\",\"downstream_local_address\":\"%DOWNSTREAM_LOCAL_ADDRESS%\",\"downstream_remote_address\":\"%DOWNSTREAM_REMOTE_ADDRESS%\",\"duration\":\"%DURATION%\",\"istio_policy_status\":\"%DYNAMIC_METADATA(istio.mixer:status)%\",\"method\":\"%REQ(:METHOD)%\",\"path\":\"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%\",\"protocol\":\"%PROTOCOL%\",\"request_id\":\"%REQ(X-REQUEST-ID)%\",\"requested_server_name\":\"%REQUESTED_SERVER_NAME%\",\"response_code\":\"%RESPONSE_CODE%\",\"response_flags\":\"%RESPONSE_FLAGS%\",\"route_name\":\"%ROUTE_NAME%\",\"start_time\":\"%START_TIME%\",\"trace_id\":\"%REQ(X-B3-TRACEID)%\",\"upstream_cluster\":\"%UPSTREAM_CLUSTER%\",\"upstream_host\":\"%UPSTREAM_HOST%\",\"upstream_local_address\":\"%UPSTREAM_LOCAL_ADDRESS%\",\"upstream_service_time\":\"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%\",\"upstream_transport_failure_reason\":\"%UPSTREAM_TRANSPORT_FAILURE_REASON%\",\"user_agent\":\"%REQ(USER-AGENT)%\",\"x_forwarded_for\":\"%REQ(X-FORWARDED-FOR)%\"}",
"AccessLogFile" : "/dev/stdout"
},
"K8sNewAPIsSupport" : {
"GatewayAPIEnabled" : false
},
"LocalityLB" : {
"Enabled" : false
},
"ControlPlaneLogInfo" : {
"Enabled" : false,
"Project" : "mesh-log-cbeb85a09161b4a26ab73e0ac****"
},
"ExtraConfiguration" : {
"IstioCRHistory" : {
"EnableHistory" : false
},
"CRAggregationEnabled" : false,
"MultiBuffer" : {
"Enabled" : false,
"PollDelay" : "0.02s"
},
"TerminationDrainDuration" : "5s",
"Lifecycle" : {
"postStart" : {
"exec" : {
"command" : [ "sleep 3s" ]
},
"httpGet" : {
"port" : "80",
"host" : "127.xx.xx.1",
"scheme" : "http",
"httpHeaders" : [ {
"name" : "key",
"value" : "value"
} ]
},
"tcpSocket" : {
"port" : "888",
"host" : "127.xx.xx.1"
}
},
"preStop" : {
"exec" : {
"command" : [ "sleep 3s" ]
},
"httpGet" : {
"port" : "80",
"host" : "127.xx.xx.1",
"scheme" : "http",
"httpHeaders" : [ {
"name" : "key",
"value" : "value"
} ]
},
"tcpSocket" : {
"port" : "888",
"host" : "127.xx.xx.1"
}
}
},
"SidecarProxyInitResourceLimit" : {
"ResourceCPULimit" : "2000m",
"ResourceMemoryLimit" : "1024Mi"
},
"SidecarProxyInitResourceRequest" : {
"ResourceCPURequest" : "10m",
"ResourceMemoryRequest" : "10Mi"
},
"DiscoverySelectors" : [ null ],
"RateLimit" : {
"EnableGlobalRateLimit" : false
},
"OPAScopeInjection" : {
"OPAScopeInjected" : false
},
"CRAggregationConfiguration" : {
"Enabled" : true
},
"NFDConfiguration" : {
"Enabled" : true,
"NFDLabelPruned" : true
},
"AccessLogExtraConf" : {
"GatewayLifecycle" : 30,
"SidecarLifecycle" : 30
},
"AutoDiagnosis" : {
"AutoDiagnosisEnabled" : true
},
"AdaptiveXdsConfiguration" : {
"Enabled" : true,
"EgressResources" : { },
"EgressReplicaCount" : 2,
"EgressAutoscaleEnabled" : true,
"EgressMinReplica" : 1,
"EgressMaxReplica" : 2,
"EgressHpaCpu" : {
"TargetAverageUtilization" : 80
},
"EgressHpaMemory" : {
"TargetAverageUtilization" : 80
}
}
}
}
},
"Clusters" : [ "[\"caf089e56daba4c51a8906fe43ea1****\",\"c80f45444b3da447da60a911390c2****\"]" ],
"ClusterSpec" : "standard",
"OwnerType" : "ackone",
"OwnerId" : "cc3e96f249d124eb38b72718ec5*****"
}
}Error codes
For a list of error codes, see Service error codes.