:UpdateMeshFeature

The operation that you want to perform. Set the value to UpdateMeshFeature.

The ID of the ASM instance.

Specifies whether to enable the tracing analysis feature. To enable this feature, make sure that you have activated Tracing Analysis. Valid values:

• true: enables the tracing analysis feature.
• false: disables the tracing analysis feature.

Default value: false.

The sampling percentage of tracing analysis.

The custom tag of tracing analysis. The value is in the JSON format.

{
    "name1": CustomTag,
    "name2": CustomTag
}

Tag structure: literal, header, or environment.

{
    "literal": {
        "value": "Fixed value"
    }
    "header": {
        "name": "Header name"
        "defaultValue": "Default value that is used if the specified header does not exist"
    }
    "environment": {
        "name": "Environment variable name"
        "defaultValue": "Default value that is used if the specified environment variable does not exist"
    }
}

The maximum length of the request path contained in the HttpUrl span tag. Default value: 256.

Specifies whether to enable cross-region load balancing. Valid values:

• true: enables cross-region load balancing.
• false: disables cross-region load balancing.

Default value: false.

The configurations of cross-region load balancing. Valid values:

• failover: the configurations of cross-region failover. Example:

  
      failover: [//  The struct that indicates the configurations of cross-region failover. 
          {
              // If a service fails in the China (Beijing) region, the traffic is redirected to the same service in the China (Hangzhou) region. 
              from: "cn-beijing", 
              to: "cn-hangzhou",
          }
      ]
  

• distribute: the configurations of cross-region traffic distribution. Example:

distribute: [ // The struct that indicates the configurations of cross-region traffic distribution. 
        {
            // For traffic that is routed to the China (Beijing) region, 70% of the traffic is allocated to the China (Beijing) region and the rest of the traffic is redirected to the China (Hangzhou) region. 
            "from": "cn-beijing",
            "to": {
                "cn-beijing": 70,
                "cn-hangzhou": 30,
            }
        }
    ]

Specifies whether to enable Prometheus monitoring. We recommend that you activate ARMS Prometheus. Valid values:

• true: enables Prometheus monitoring.
• false: disables Prometheus monitoring.

Default value: false.

Specifies whether to install the Open Policy Agent (OPA) plug-in. Valid values:

• true: installs the OPA plug-in.
• false: does not install the OPA plug-in.

Default value: false.

The log level of the OPA proxy container.

• info: reports all information.
• debug: reports debugging and error information.
• error: reports only error information.

The number of CPU cores that are requested by the OPA proxy container.

The size of the memory that is requested by the OPA proxy container.

The maximum number of CPU cores that are available to the OPA proxy container.

The maximum size of the memory that is available to the OPA proxy container.

Specifies whether to enable the mesh audit feature. To enable this feature, make sure that you have activated Log Service. Valid values:

• true: enables the mesh audit feature.
• false: disables the mesh audit feature.

Default value: false.

The name of the Log Service project that is used for mesh audit.

Default format: mesh-log-{ASM instance ID}.

Specifies whether to use a self-managed Zipkin system to collect tracing analysis data. Valid values:

• true: uses a self-managed Zipkin system.
• false: does not use a self-managed Zipkin system.

Default value: false.

The policy of handling outbound traffic. Valid values:

• ALLOW_ANY: allows outbound traffic to all external services.
• REGISTRY_ONLY: allows only outbound traffic to external services that are defined in the service registry of the ASM instance.

The number of CPU cores that are requested by the sidecar proxy container.

The size of the memory that is requested by the sidecar proxy container.

The maximum number of CPU cores that are available to the sidecar proxy container.

The maximum size of the memory that is available to the sidecar proxy container.

The IP addresses of external services to which traffic is intercepted.

The IP addresses of external services to which traffic is not intercepted.

The outbound ports to be excluded from redirection to the sidecar proxy. Separate multiple port numbers with commas (,).

The inbound ports for which traffic is to be redirected to the sidecar proxy.

The inbound ports to be excluded from redirection to the sidecar proxy. Separate multiple port numbers with commas (,).

Specifies whether to enable automatic sidecar injection for all namespaces. Valid values:

• true: enables automatic sidecar injection for all namespaces.
• false: does not enable automatic sidecar injection for all namespaces.

Default value: false.

Specifies whether to enable automatic sidecar injection by using pod annotations. Valid values:

• true: enables automatic sidecar injection by using pod annotations.
• false: disables automatic sidecar injection by using pod annotations.

Default value: false.

The number of CPU cores that are requested by the sidecar injector pod.

The size of the memory that is requested by the sidecar injector pod.

The maximum number of CPU cores that are available to the sidecar injector pod.

The maximum size of the memory that is available to the sidecar injector pod.

Other configurations of automatic sidecar injection, in the YAML format.

Specifies whether to enable the Container Network Interface (CNI) plug-in. Valid values:

• true: enables the CNI plug-in.
• false: disables the CNI plug-in.

Default value: false.

The namespaces to be excluded for the CNI plug-in.

Specifies whether to enable the OPA plug-in. Valid values:

• true: enables the OPA plug-in.
• false: disables the OPA plug-in.

Default value: false.

Specifies whether to enable the support for HTTP 1.0. Valid values:

• true: enables support for HTTP 1.0.
• false: disables support for HTTP 1.0.

Default value: false.

Specifies whether to enable the mesh topology feature. To enable this feature, make sure that you have enabled Prometheus monitoring. If Prometheus monitoring is disabled, the value of this parameter must be false. Valid values:

• true: enables the mesh topology feature.
• false: disables the mesh topology feature.

Default value: false.

Specifies whether to use a custom Prometheus instance. Valid values:

• true: uses a custom Prometheus instance.
• false: does not use a custom Prometheus instance.

Default value: false.

The endpoint of Prometheus monitoring. If you use ARMS Prometheus, set this parameter to the endpoint of Prometheus provided by ARMS.

Specifies whether to enable access log collection. Valid values:

• true: enables access log collection.
• false: does not enable access log collection.

Default value: false.

Specifies whether to enable Microservices Engine (MSE). Valid values:

• true: enables MSE.
• false: disables MSE.

Default value: false.

Specifies whether to enable Redis Filter. Valid values:

• true: enables Redis Filter.

• false: disables Redis Filter.

  Default value: false.

Specifies whether to enable MySQL Filter. Valid values:

• true: enables MySQL Filter.
• false: disables MySQL Filter.

Default value: false.

Specifies whether to enable Thrift Filter. Valid values:

• true: enables Thrift Filter.
• false: disables Thrift Filter.

Default value: false.

Specifies whether to enable WebAssembly Filter. Valid values:

• true: enables WebAssembly Filter.
• false: disables WebAssembly Filter.

Default value: false.

Specifies whether to enable DNS proxying. Valid values:

• true: enables the DNS proxying feature.
• false: disables the DNS proxying feature.

Default value: false.

Specifies whether to enable Dubbo Filter. Valid values:

• true: enables Dubbo Filter.
• false: disables Dubbo Filter.

Default value: false.

Specifies whether to enable gateway configuration filtering. Valid values:

• true: enables gateway configuration filtering.
• false: disables gateway configuration filtering.

Default value: false.

Specifies whether to enable Secret Discovery Service (SDS). Valid values:

• true: SDS is enabled.
• false: SDS is disabled.

Default value: false.

Specifies whether to enable gRPC Access Log Service (ALS) for Envoy. Valid values:

• true: enables gRPC ALS for Envoy.
• false: disables gRPC ALS for Envoy.

Default value: false.

The endpoint of gRPC ALS for Envoy.

The port of gRPC ALS for Envoy.

Specifies whether to enable Gateway API. Valid values:

• true: enables Gateway API.
• false: disables Gateway API.

Default value: false.

Specifies whether to enable the external service registry. Valid values:

• true: enables the external service registry.
• false: disables the external service registry.

Default value: false.

The instance ID of the Nacos registry.

The custom format of access logs. To set this parameter, make sure that you have enabled access log collection. The value must be a JSON string. The following key names must be contained: authority_for, bytes_received, bytes_sent, downstream_local_address, downstream_remote_address, duration, istio_policy_status, method, path, protocol, requested_server_name, response_code, response_flags, route_name, start_time, trace_id, upstream_cluster, upstream_host, upstream_local_address, upstream_service_time, upstream_transport_failure_reason, user_agent, and x_forwarded_for.

Specifies whether to enable access logging. Valid values:

• "": disables access logging.
• /dev/stdout: enables access logging. Access logs are written to /dev/stdout.

The custom project on which the Log Service collects logs.

Specifies whether to enable the rollback feature for Istio resources.

Specifies whether the Kubernetes API of clusters on the data plane can be used access Istio resources. To use this feature, the version of the ASM instance must be V1.9.7.93 or later.

The maximum period of time that the sidecar proxy waits for requests to be processed before the proxy is stopped. For example, if you want to specify a period of 5 seconds, set this parameter to 5s.

The maximum number of CPU cores that are available to the istio-init container.

The maximum size of the memory that is available to the istio-init container.

The number of CPU cores that are requested by the istio-init container.

The size of the memory that is requested by the istio-init container.

The lifecycle of the sidecar proxy.

Specifies whether to enable Transport Layer Security (TLS) acceleration based on MultiBuffer.

The pull-request latency. By default, this parameter is left empty.

The label selectors used to specify the namespaces of the clusters on the data plane for selective service discovery.

Specifies whether to enable Application High Availability Service (AHAS)-based throttling. Valid values:

• true: enables AHAS-based throttling.
• false: disables AHAS-based throttling.

Default value: false.

The edition of the ASM instance. Valid values:

• standard: Standard Edition
• enterprise: Enterprise Edition
• ultimate: Ultimate Edition

Specifies whether to enable the feature of controlling the OPA injection scope. Valid values:

• true: enables the feature.
• false: disables the feature.

The minimum number of CPU cores requested by the pod to which the OPA proxy container is injected. For example, 1000m indicates one CPU core.

The minimum size of the memory requested by the pod to which the OPA proxy container is injected. For example, 50 Mi indicates 50 MB.

The maximum number of CPU cores that are available to the pod to which the OPA proxy container is injected. For example, 1000m indicates one CPU core.

The maximum size of the memory that is available to the pod to which the OPA proxy container is injected. For example, 1024Mi indicates 1024 MB.

Specifies whether to create an SLB instance for accessing the ASM mesh topology.

Specifies whether to enable Node Feature Discovery (NFD).

Specifies whether to clear feature labels on nodes when NFD is disabled.

This parameter is valid only when the NFDEnabled parameter is set to false.

The minimum number of CPU cores requested by the proxy that exports trace data. For example, 1000m indicates one CPU core.

The minimum size of the memory requested by the proxy that exports trace data. For example, 1Mi indicates 1 MB.

The maximum number of CPU cores that are available to the proxy that exports trace data. For example, 1000m indicates one CPU core.

The maximum size of the memory that is available to the proxy that exports trace data. For example, 1Mi indicates 1 MB.

The retention period for the access logs of the ingress gateway. Unit: day. The logs are collected by using the Log Service. For example, 30 indicates 30 days.

The retention period for the access logs of the sidecar proxy. Unit: day. The logs are collected by using the Log Service. For example, 30 indicates 30 days.

Specifies whether to enable automatic diagnosis for the ASM instance. If you enable this feature, the ASM instance is automatically diagnosed when you modify Istio resources in the ASM instance.

The outbound ports for which traffic is to be redirected to the sidecar proxy.

The log level of the sidecar proxy on the data plane. Log levels include none, error, warn, info, and debug. The levels correspond to different amounts of information reported by the logs. For example, none-level logs report the least information, while debug-level logs report the most information.

The number of worker threads used by the sidecar proxy on the data plane.

Specifies whether to delay application container startup until the sidecar proxy container is started in a pod.

Other metrics of the sidecar proxy on the data plane.

The mode in which the sidecar proxy intercepts inbound traffic. Valid values: Valid values:

• REDIRECT: The sidecar proxy intercepts inbound traffic in the REDIRECT mode.
• TPROXY: The sidecar proxy intercepts inbound traffic in the TPROXY mode.

Specifies whether to load the bootstrap configuration before the sidecar proxy is started.

Specifies the authentication token of the ARMS Prometheus instance when the mesh topology feature is enabled and ARMS Prometheus is used to collect monitoring metrics. The token is used to allow mesh topology to access the ARMS Prometheus instance.

The token is in the JSON format. The key in the JSON object is the ID of the cluster on the data plane, and the value is the authentication token for the ARMS Prometheus instance deployed in the cluster.

The ID of the request.