DescribeServiceMeshDetail - Alibaba Cloud Service Mesh - Alibaba Cloud Documentation Center

Queries the details of a Service Mesh (ASM) instance.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Debug

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

Operation: the value that you can use in the Action element to specify the operation on a resource.
Access level: the access level of each operation. The levels are read, write, and list.
Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
- The required resource types are displayed in bold characters.
- If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
Condition Key: the condition key that is defined by the cloud service.
Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.

Operation	Access level	Resource type	Condition key	Associated operation
servicemesh:DescribeServiceMeshDetail	get	All Resources *	none	none

Request parameters

Parameter	Type	Required	Description	Example
ServiceMeshId	string	Yes	The ASM instance ID.	c08ba3fd1e6484b0f8cc1ad8fe10d****

Response parameters

Parameter	Type	Description	Example
	object
RequestId	string	The request ID.	11fd0027-c27e-41bb-a565-75583054****
ServiceMesh	object	The information about the ASM instance.
Endpoints	object	The endpoints of the ASM instance.
IntranetPilotEndpoint	string	The endpoint that is used to access Istio Pilot from the internal network.	192.168..:15011
PublicPilotEndpoint	string	The endpoint that is used to expose Istio Pilot to the Internet.	182.92..:15011
IntranetApiServerEndpoint	string	The endpoint that is used to access the API server from the internal network.	https://192.168..:6443
PublicApiServerEndpoint	string	The endpoint that is used to access the API server over the Internet.	https://123.56..:6443
ServiceMeshInfo	object	The basic information about the ASM instance.
Profile	string	The edition of the ASM instance. Valid values: `Default`: Standard Edition `Pro`: Enterprise Edition and Ultimate Edition	Default
CreationTime	string	The time when the ASM instance was created.	2020-04-21T09:42:20+08:00
UpdateTime	string	The time when the ASM instance was last modified.	2020-06-03T14:48:54+08:00
ErrorMessage	string	The returned error message.	error
Version	string	The version of the ASM instance.	v1.7.4.0-gfb34ba99-aliyun
State	string	The state of the ASM instance.	running
ServiceMeshId	string	The ASM instance ID.	c08ba3fd1e6484b0f8cc1ad8fe10d****
Name	string	The name of the ASM instance.	mesh1
RegionId	string	The ID of the region in which the ASM instance resides.	cn-beijing
Spec	object	The specifications of the ASM instance.
Network	object	The network configurations of the ASM instance.
VpcId	string	The ID of the virtual private cloud (VPC).	vpc-2zew0rajjkmxy2369****
SecurityGroupId	string	The security group ID.	sg-2ze384sxttxbctnj****
VSwitches	array	The virtual switches (vSwitches).
	string	The vSwitch ID.	vsw-2ze66z3ntvsej0mdo****
LoadBalancer	object	The information about load balancing.
PilotPublicEip	boolean	Indicates whether Istio Pilot is exposed to the Internet. Valid values: `true` `false`	true
PilotPublicLoadbalancerId	string	The ID of the Classic Load Balancer (CLB) instance that is used when Istio Pilot is exposed to the Internet.	lb-2zesa8qs8kbkj9jkl****
ApiServerLoadbalancerId	string	The ID of the CLB instance that is used when the API server is exposed to the Internet.	lb-2zekaak10uxds44vx****
ApiServerPublicEip	boolean	Indicates whether the API server is exposed to the Internet. Valid values: `true` `false`	true
MeshConfig	object	The configurations of the ASM instance.
OPA	object	The information about the Open Policy Agent (OPA) plug-in.
RequestMemory	string	The size of the memory that is requested by OPA.	1024Mi
LogLevel	string	The level of the logs to be generated for OPA.	info
Enabled	boolean	Indicates whether the OPA plug-in is installed. Valid values: `true` `false`	true
LimitMemory	string	The maximum size of the memory that is available to the OPA proxy container.	512Mi
RequestCPU	string	The number of CPU cores that are requested by the OPA proxy container.	2
LimitCPU	string	The maximum number of CPU cores that are available to the OPA proxy container.	1
Prometheus	object	The configurations of Prometheus monitoring.
UseExternal	boolean	Indicates whether a custom Prometheus instance is used. Valid values: `true` `false`	false
ExternalUrl	string	The endpoint of Prometheus monitoring. If you use a custom Prometheus instance, this parameter is populated by the system.	http://prometheus:9090
AccessLog	object	The configurations of access log collection.
Enabled	boolean	Indicates whether access log collection is enabled. Valid values: `true` `false`	true
Project	string	The name of the Simple Log Service project that stores access logs.	k8s-log-b7b05d08670e41ca8c8fc0b7718f*****
Pilot	object	The Pilot configurations.
Http10Enabled	boolean	Indicates whether HTTP/1.0 is supported. Valid values: `true` `false`	false
TraceSampling	float	The sampling percentage of tracing analysis.	100
Feature	object	The configurations of Pilot features.
FilterGatewayClusterConfig	boolean	Indicates whether gateway configuration filtering is enabled. Valid values: `true` `false`	false
EnableSDSServer	boolean	Indicates whether Secret Discovery Service (SDS) is enabled. Valid values: `true` `false`	false
ConfigSource	object	The configurations of communication between external services and services in the mesh.
Enabled	boolean	Indicates whether communication is allowed between external services and services in the mesh. Valid values: `true` `false`	false
NacosID	string	The ID of the Nacos instance that provides external service information.	mse-cn-tl326******
MSE	object	The configurations of Microservices Engine (MSE).
Enabled	boolean	Indicates whether MSE is enabled. Valid values: `true` `false`	false
CustomizedZipkin	boolean	Indicates whether a custom Zipkin system is used. Valid values: `true` `false`	false
SidecarInjector	object	The configurations of the sidecar injector.
EnableNamespacesByDefault	boolean	Indicates whether automatic sidecar proxy injection is enabled for all namespaces. Valid values: `true` `false`	false
RequestMemory	string	The size of the memory that is requested by the pod where the sidecar injector resides.	512Mi
LimitMemory	string	The maximum size of the memory that is available to the pod where the sidecar injector resides.	2048Mi
RequestCPU	string	The number of CPU cores that are requested by the pod where the sidecar injector resides.	1000m
AutoInjectionPolicyEnabled	boolean	Indicates whether automatic sidecar proxy injection can be enabled by using pod annotations. Valid values: `true` `false`	true
LimitCPU	string	The maximum number of CPU cores that are available to the pod where the sidecar injector resides.	4000m
InitCNIConfiguration	object	The configurations of Container Network Interface (CNI).
ExcludeNamespaces	string	The namespaces to exclude. The CNI plug-in ignores pods in the excluded namespaces.	kube-system,istio-system
Enabled	boolean	Indicates whether the CNI plug-in is enabled. Valid values: `true` `false`	false
SidecarInjectorWebhookAsYaml	string	Other configurations of automatic sidecar proxy injection, in the YAML format. For more information, see Enable automatic sidecar proxy injection.	{"injectedAnnotations":{"test/istio-init":"runtime/default2","test/istio-proxy":"runtime/default"},"replicaCount":2,"nodeSelector":{"beta.kubernetes.io/os":"linux"}}
SidecarInjectorNum	integer	The number of component replicas that are used for sidecar proxy injection. Default value: `1`.	1
IncludeIPRanges	string	The IP ranges in CIDR form to redirect to the sidecar proxies in the ASM instance.	192.168.0.0/16
ExcludeIPRanges	string	The IP ranges in CIDR form to be excluded from redirection to sidecar proxies in the ASM instance.	172.16.0.0
ExcludeOutboundPorts	string	The outbound ports to be excluded from redirection to sidecar proxies in the ASM instance.	80,81
ExcludeInboundPorts	string	The inbound ports to be excluded from redirection to sidecar proxies in the ASM instance.	80,81
Telemetry	boolean	Indicates whether Prometheus monitoring is enabled. We recommend that you use Managed Service for Prometheus. Valid values: `true` `false`	true
Edition	object	The information about the edition.
Name	string	The name of the edition.	Pro
IstiodImageTag	string	The version of the Istiod image.	v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun
ProxyImageTag	string	The version of the Istio Proxy image.	v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun
ProtocolSupport	object	The configurations of protocol support.
MysqlFilterEnabled	boolean	Indicates whether MySQL Filter is enabled. Valid values: `true` `false`	false
RedisFilterEnabled	boolean	Indicates whether Redis Filter is enabled. Valid values: `true` `false`	false
ThriftFilterEnabled	boolean	Indicates whether Thrift Filter is enabled. Valid values: `true` `false`	false
DubboFilterEnabled	boolean	Indicates whether Dubbo Filter is enabled. Valid values: `true` `false`	false
OutboundTrafficPolicy	string	The outbound traffic policy. Valid values: `ALLOW_ANY`: Outbound traffic to all external services is allowed. `REGISTRY_ONLY`: Outbound traffic is allowed to only external services that are defined in the service registry of the ASM instance.	ALLOW_ANY
Kiali	object	The configurations of mesh topology.
Enabled	boolean	Indicates whether mesh topology is enabled. Mesh topology can be enabled only when Prometheus monitoring is enabled. If Prometheus monitoring is disabled, you must set this parameter to `false`.`` Valid values: `true` `false`	false
Url	string	The endpoint of the mesh topology service.	http://1.2..:20001
Tracing	boolean	Indicates whether tracing analysis is enabled. This feature can be enabled only after Managed Service for OpenTelemetry is activated. Valid values: `true` `false`	true
WebAssemblyFilterDeployment	object	The configurations of WebAssembly Filter.
Enabled	boolean	Indicates whether WebAssembly Filter is enabled. Valid values: `true` `false`	false
EnableLocalityLB	boolean	Indicates whether the feature that routes traffic to the nearest instance is enabled. Valid values: `true` `false`	true
Audit	object	The information about mesh audit.
Enabled	boolean	Indicates whether mesh audit is enabled. Valid values: `true` `false`	true
Project	string	The name of the Simple Log Service project that is used for mesh audit.	audit-project
AuditProjectStatus	string	Indicates whether an audit project exists in the ASM instance. Valid values: `audit_project_exist`: An audit project exists. `audit_project_not_exist`: No audit project exists.	audit_project_not_exist
Proxy	object	The proxy configurations.
RequestMemory	string	The size of the memory that is requested.	128Mi
ClusterDomain	string	The trusted domain.	cluster.domain
LimitMemory	string	The maximum size of the memory.	1024Mi
RequestCPU	string	The number of CPU cores that are requested.	100m
EnableDNSProxying	boolean	Indicates whether the Domain Name System (DNS) proxy feature is enabled. Valid values: `true` `false`	false
LimitCPU	string	The maximum number of CPU cores.	2000m
AccessLogServiceEnabled	boolean	Indicates whether gRPC Access Log Service (ALS) for Envoy is enabled. Valid values: `true` `false`	false
AccessLogServiceHost	string	The endpoint of gRPC ALS for Envoy.	0.0.0.0
AccessLogServicePort	integer	The port of gRPC ALS for Envoy.	9999
AccessLogFormat	string	The format of the access logs of sidecar proxies.	{"authority_for":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"}
AccessLogFile	string	The path to the file that stores the access logs of sidecar proxies.	/dev/stdout
K8sNewAPIsSupport	object	The information about the Kubernetes API.
GatewayAPIEnabled	boolean	Indicates whether Gateway API is enabled. Valid values: `true` `false`	false
LocalityLB	object	The configurations of cross-region load balancing.
Enabled	boolean	Indicates whether cross-region load balancing is enabled. Valid values: `true` `false`	false
Failover	object	The configurations of cross-region failover. Note Either Failover or `Distribute` can be set. If you set `Failover`, you cannot set `Distribute`.	{"failover":[{"from":"cn-hangzhou","to":"cn-shanghai"}]}
Distribute	object	The configurations of cross-region traffic distribution. Note Either `Failover` or Distribute can be set. If you set `Distribute`, you cannot set Failover.	[{"from":"cn-shanghai","to":{"cn-hangzhou/":50,"cn-shanghai/":25,"cn-zhangjiakou/":25}},{"from":"cn-hangzhou","to":{"cn-hangzhou/":50,"cn-shanghai/":25,"cn-zhangjiakou/":25}}]
ControlPlaneLogInfo	object	The configurations of control-plane log collection.
Enabled	boolean	Indicates whether the collection of control plane logs is enabled. Valid values: `true` `false`	false
Project	string	The name of the Simple Log Service project that stores control plane logs.	mesh-log-cbeb85a09161b4a26ab73e0ac****
LogTTL	integer	The time to live (TTL) of the collected control-plane logs. Unit: day.	30
ExtraConfiguration	object	The configurations of additional features for the ASM instance.
IstioCRHistory	object	The configurations of the rollback feature for Istio resources.
EnableHistory	boolean	Indicates whether the rollback feature for Istio resources is enabled. Valid values: `true` `false`	false
CRAggregationEnabled	boolean	Indicates whether the Kubernetes API of clusters on the data plane can be used to access Istio resources. Valid values: `true` `false`	false
MultiBuffer	object	The information about Transport Layer Security (TLS) acceleration based on MulitiBuffer.
Enabled	boolean	Indicates whether MulitiBuffer-based TLS acceleration is enabled. Valid values: `true` `false`	false
PollDelay	string	The pull-request latency.	0.02s
TerminationDrainDuration	string	The maximum period of time that Istio Proxy waits for a request to end.	5s
Lifecycle	object	The lifecycle of Istio Proxy.
postStart	object	The post-start parameters.
exec	object	The post-start script.
command	array	The executed commands. The value is a string that consists of JSON arrays.
	string	The executed command.	sleep 3s
httpGet	object	The HTTP GET request that is sent before the instance stops.
port	string	The port number of the request.	80
host	string	The URL of the request.	127.xx.xx.1
scheme	string	The request method. Valid values: `http` and `https`.	http
httpHeaders	array<object>	The HTTP request headers.
	object
name	string	The name of the HTTP request header.	key
value	string	The value of the HTTP request header.	value
tcpSocket	object	The TCP socket request that is sent.
port	string	The port number of the TCP socket request.	888
host	string	The URL of the TCP socket request.	127.xx.xx.1
preStop	object	The pre-close parameters.
exec	object	The pre-close script.
command	array	The executed commands. The value is a string that consists of JSON arrays.
	string	The executed command.	sleep 3s
httpGet	object	The HTTP GET request that is sent before the instance stops.
port	string	The port number of the request.	80
host	string	The URL of the request.	127.xx.xx.1
scheme	string	The request method. Valid values: `http` and `https`.	http
httpHeaders	array<object>	The HTTP request headers.
	object
name	string	The name of the HTTP request header.	key
value	string	The value of the HTTP request header.	value
tcpSocket	object	The TCP socket request that is sent.
port	string	The port number of the request.	888
host	string	The URL of the request.	127.xx.xx.1
SidecarProxyInitResourceLimit	object	The resource limits on the istio-init container.
ResourceCPULimit	string	The maximum number of CPU cores that are available to the istio-init container.	2000m
ResourceMemoryLimit	string	The maximum size of the memory that is available to the istio-init container.	1024Mi
SidecarProxyInitResourceRequest	object	The resources that are required by the istio-init container.
ResourceCPURequest	string	The number of CPU cores that are requested by the istio-init container.	10m
ResourceMemoryRequest	string	The size of the memory that is requested by the istio-init container.	10Mi
DiscoverySelectors	array<object>	The label selectors used to specify the namespaces of the clusters on the data plane. The control plane discovers and processes only application services in the specified namespaces.
	object	The label selectors used to specify the namespaces of the clusters on the data plane. The control plane discovers and processes only application services in the specified namespaces.	[{"matchExpressions":[{"key":"asm-discovery","operator":"Exists"}]}]
OPAScopeInjection	object	The configurations of the feature of controlling the OPA injection scope.
OPAScopeInjected	boolean	Indicates whether the feature of controlling the OPA injection scope is enabled. Valid values: `true` `false`	false
CRAggregationConfiguration	object	Access to Istio resources by using the Kubernetes API on the data plane.
Enabled	boolean	Indicates whether Istio resources can be accessed by using the Kubernetes API on the data plane.	true
NFDConfiguration	object	The configurations of Node Feature Discovery (NFD).
Enabled	boolean	Indicates whether NFD is enabled.	true
NFDLabelPruned	boolean	Indicates whether feature labels on nodes are cleared when NFD is disabled.	true
AccessLogExtraConf	object	The configurations of additional features for access log collection.
GatewayLifecycle	integer	The retention period for the access logs of the ingress gateway. Unit: day. The logs are collected by using Simple Log Service. For example, the value 30 indicates that the logs are retained for 30 days.	30
SidecarLifecycle	integer	The retention period for the access logs of sidecar proxies. Unit: day. The logs are collected by using Simple Log Service. For example, the value 30 indicates that the logs are retained for 30 days.	30
GatewayEnabled	boolean	Indicates whether gateway log collection is enabled.	true
SidecarEnabled	boolean	Indicates whether sidecar log collection is enabled.	true
AutoDiagnosis	object	The configurations of automatic diagnostics for the ASM instance.
AutoDiagnosisEnabled	boolean	Indicates whether automatic diagnostics is enabled for the ASM instance. If you enable this feature, the ASM instance is automatically diagnosed 5 minutes after you modify an Istio resource.	true
AdaptiveXdsConfiguration	object	The configurations of adaptive xDS optimization.
Enabled	boolean	Indicates whether adaptive xDS optimization is enabled.	true
EgressResources	object	The resource configurations of the egress gateway that is used by adaptive xDS optimization.
Requests	object	The resources that are requested by the egress gateway.	{"cpu":"100m", "memory": "256Mi"}
Limits	object	The resources that are available to the egress gateway.	{"cpu":"200m", "memory": "512Mi"}
EgressReplicaCount	integer	The number of the egress gateway pod replicas.	2
EgressAutoscaleEnabled	boolean	Indicates whether Horizontal Pod Autoscaling (HPA) is enabled for the egress gateway.	true
EgressMinReplica	integer	The minimum number of egress gateway pod replicas when HPA is enabled.	1
EgressMaxReplica	integer	The maximum number of egress gateway pod replicas when HPA is enabled.	2
EgressHpaCpu	object	The CPU resource configurations of the egress gateway when HPA is enabled.
TargetAverageUtilization	integer	The expected CPU utilization when HPA is enabled. Valid values: 1 to 100. If the CPU utilization exceeds this value, the number of pod replicas increases. If the CPU utilization is less than this value, the number of pod replicas decreases.	80
EgressHpaMemory	object	The memory resource configurations of the egress gateway when HPA is enabled.
TargetAverageUtilization	integer	The expected memory usage when HPA is enabled. Valid values: 1 to 100. If the memory usage exceeds this value, the number of pod replicas increases. If the memory usage is less than this value, the number of pod replicas decreases.	80
IstiodExtraConfiguration	object	Additional configurations for Istiod.
LabelsForOffloadedWorkloads	string	The labels for isolated workloads.	name=xx,region=xx
Clusters	array	The clusters.
	string	The cluster.	["caf089e56daba4c51a8906fe43ea1**","c80f45444b3da447da60a911390c2**"]
ClusterSpec	string	The specification of the ASM instance. Valid values: `standard`: Standard Edition `enterprise`: Enterprise Edition `ultimate`: Ultimate Edition	standard
OwnerType	string	The Alibaba Cloud service for which the ASM instance is created. Valid values: `ackone`: The ASM instance is created for Alibaba Cloud Distributed Cloud Container Platform (ACK One). An empty value indicates that the ASM instance is created by the user.	ackone
OwnerId	string	The ID of the Alibaba Cloud service instance for which the ASM instance is created.	cc3e96f249d124eb38b72718ec5*****

Examples

Sample success responses

JSONformat

{
  "RequestId": "11fd0027-c27e-41bb-a565-75583054****",
  "ServiceMesh": {
    "Endpoints": {
      "IntranetPilotEndpoint": "192.168.**.**:15011",
      "PublicPilotEndpoint": "182.92.**.**:15011",
      "IntranetApiServerEndpoint": "https://192.168.**.**:6443",
      "PublicApiServerEndpoint": "https://123.56.**.**:6443"
    },
    "ServiceMeshInfo": {
      "Profile": "Default",
      "CreationTime": "2020-04-21T09:42:20+08:00",
      "UpdateTime": "2020-06-03T14:48:54+08:00",
      "ErrorMessage": " error",
      "Version": "v1.7.4.0-gfb34ba99-aliyun",
      "State": "running",
      "ServiceMeshId": "c08ba3fd1e6484b0f8cc1ad8fe10d****",
      "Name": "mesh1",
      "RegionId": "cn-beijing"
    },
    "Spec": {
      "Network": {
        "VpcId": "vpc-2zew0rajjkmxy2369****",
        "SecurityGroupId": "sg-2ze384sxttxbctnj****",
        "VSwitches": [
          "vsw-2ze66z3ntvsej0mdo****"
        ]
      },
      "LoadBalancer": {
        "PilotPublicEip": true,
        "PilotPublicLoadbalancerId": "lb-2zesa8qs8kbkj9jkl****",
        "ApiServerLoadbalancerId": "lb-2zekaak10uxds44vx****",
        "ApiServerPublicEip": true
      },
      "MeshConfig": {
        "OPA": {
          "RequestMemory": "1024Mi",
          "LogLevel": "info",
          "Enabled": true,
          "LimitMemory": "512Mi",
          "RequestCPU": "2",
          "LimitCPU": "1"
        },
        "Prometheus": {
          "UseExternal": false,
          "ExternalUrl": "http://prometheus:9090"
        },
        "AccessLog": {
          "Enabled": true,
          "Project": "k8s-log-b7b05d08670e41ca8c8fc0b7718f*****"
        },
        "Pilot": {
          "Http10Enabled": false,
          "TraceSampling": 100,
          "Feature": {
            "FilterGatewayClusterConfig": false,
            "EnableSDSServer": false
          },
          "ConfigSource": {
            "Enabled": false,
            "NacosID": "mse-cn-tl326******"
          }
        },
        "MSE": {
          "Enabled": false
        },
        "CustomizedZipkin": false,
        "SidecarInjector": {
          "EnableNamespacesByDefault": false,
          "RequestMemory": "512Mi",
          "LimitMemory": "2048Mi",
          "RequestCPU": "1000m",
          "AutoInjectionPolicyEnabled": true,
          "LimitCPU": "4000m",
          "InitCNIConfiguration": {
            "ExcludeNamespaces": "kube-system,istio-system",
            "Enabled": false
          },
          "SidecarInjectorWebhookAsYaml": "{\"injectedAnnotations\":{\"test/istio-init\":\"runtime/default2\",\"test/istio-proxy\":\"runtime/default\"},\"replicaCount\":2,\"nodeSelector\":{\"beta.kubernetes.io/os\":\"linux\"}}",
          "SidecarInjectorNum": 1
        },
        "IncludeIPRanges": "192.168.0.0/16",
        "ExcludeIPRanges": "172.16.0.0",
        "ExcludeOutboundPorts": "80,81",
        "ExcludeInboundPorts": "80,81",
        "Telemetry": true,
        "Edition": {
          "Name": "Pro",
          "IstiodImageTag": "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun",
          "ProxyImageTag": "v1.9.7.1-3-gb3f1ab3c9c-pro-aliyun"
        },
        "ProtocolSupport": {
          "MysqlFilterEnabled": false,
          "RedisFilterEnabled": false,
          "ThriftFilterEnabled": false,
          "DubboFilterEnabled": false
        },
        "OutboundTrafficPolicy": "ALLOW_ANY",
        "Kiali": {
          "Enabled": false,
          "Url": "http://1.2.**.**:20001"
        },
        "Tracing": true,
        "WebAssemblyFilterDeployment": {
          "Enabled": false
        },
        "EnableLocalityLB": true,
        "Audit": {
          "Enabled": true,
          "Project": "audit-project",
          "AuditProjectStatus": "audit_project_not_exist"
        },
        "Proxy": {
          "RequestMemory": "128Mi",
          "ClusterDomain": "cluster.domain",
          "LimitMemory": "1024Mi",
          "RequestCPU": "100m",
          "EnableDNSProxying": false,
          "LimitCPU": "2000m",
          "AccessLogServiceEnabled": false,
          "AccessLogServiceHost": "0.0.0.0",
          "AccessLogServicePort": 9999,
          "AccessLogFormat": "{\"authority_for\":\"%REQ(:AUTHORITY)%\",\"bytes_received\":\"%BYTES_RECEIVED%\",\"bytes_sent\":\"%BYTES_SENT%\",\"downstream_local_address\":\"%DOWNSTREAM_LOCAL_ADDRESS%\",\"downstream_remote_address\":\"%DOWNSTREAM_REMOTE_ADDRESS%\",\"duration\":\"%DURATION%\",\"istio_policy_status\":\"%DYNAMIC_METADATA(istio.mixer:status)%\",\"method\":\"%REQ(:METHOD)%\",\"path\":\"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%\",\"protocol\":\"%PROTOCOL%\",\"request_id\":\"%REQ(X-REQUEST-ID)%\",\"requested_server_name\":\"%REQUESTED_SERVER_NAME%\",\"response_code\":\"%RESPONSE_CODE%\",\"response_flags\":\"%RESPONSE_FLAGS%\",\"route_name\":\"%ROUTE_NAME%\",\"start_time\":\"%START_TIME%\",\"trace_id\":\"%REQ(X-B3-TRACEID)%\",\"upstream_cluster\":\"%UPSTREAM_CLUSTER%\",\"upstream_host\":\"%UPSTREAM_HOST%\",\"upstream_local_address\":\"%UPSTREAM_LOCAL_ADDRESS%\",\"upstream_service_time\":\"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%\",\"upstream_transport_failure_reason\":\"%UPSTREAM_TRANSPORT_FAILURE_REASON%\",\"user_agent\":\"%REQ(USER-AGENT)%\",\"x_forwarded_for\":\"%REQ(X-FORWARDED-FOR)%\"}",
          "AccessLogFile": "/dev/stdout"
        },
        "K8sNewAPIsSupport": {
          "GatewayAPIEnabled": false
        },
        "LocalityLB": {
          "Enabled": false,
          "Failover": {
            "failover": [
              {
                "from": "cn-hangzhou",
                "to": "cn-shanghai"
              }
            ]
          },
          "Distribute": [
            {
              "from": "cn-shanghai",
              "to": {
                "cn-hangzhou/*": 50,
                "cn-shanghai/*": 25,
                "cn-zhangjiakou/*": 25
              }
            },
            {
              "from": "cn-hangzhou",
              "to": {
                "cn-hangzhou/*": 50,
                "cn-shanghai/*": 25,
                "cn-zhangjiakou/*": 25
              }
            }
          ]
        },
        "ControlPlaneLogInfo": {
          "Enabled": false,
          "Project": "mesh-log-cbeb85a09161b4a26ab73e0ac****",
          "LogTTL": 30
        },
        "ExtraConfiguration": {
          "IstioCRHistory": {
            "EnableHistory": false
          },
          "CRAggregationEnabled": false,
          "MultiBuffer": {
            "Enabled": false,
            "PollDelay": "0.02s"
          },
          "TerminationDrainDuration": "5s",
          "Lifecycle": {
            "postStart": {
              "exec": {
                "command": [
                  "sleep 3s"
                ]
              },
              "httpGet": {
                "port": "80",
                "host": "127.xx.xx.1",
                "scheme": "http",
                "httpHeaders": [
                  {
                    "name": "key",
                    "value": "value"
                  }
                ]
              },
              "tcpSocket": {
                "port": "888",
                "host": "127.xx.xx.1"
              }
            },
            "preStop": {
              "exec": {
                "command": [
                  "sleep 3s"
                ]
              },
              "httpGet": {
                "port": "80",
                "host": "127.xx.xx.1",
                "scheme": "http",
                "httpHeaders": [
                  {
                    "name": "key",
                    "value": "value"
                  }
                ]
              },
              "tcpSocket": {
                "port": "888",
                "host": "127.xx.xx.1"
              }
            }
          },
          "SidecarProxyInitResourceLimit": {
            "ResourceCPULimit": "2000m",
            "ResourceMemoryLimit": "1024Mi"
          },
          "SidecarProxyInitResourceRequest": {
            "ResourceCPURequest": "10m",
            "ResourceMemoryRequest": "10Mi"
          },
          "DiscoverySelectors": [
            [
              {
                "matchExpressions": [
                  {
                    "key": "asm-discovery",
                    "operator": "Exists"
                  }
                ]
              }
            ]
          ],
          "OPAScopeInjection": {
            "OPAScopeInjected": false
          },
          "CRAggregationConfiguration": {
            "Enabled": true
          },
          "NFDConfiguration": {
            "Enabled": true,
            "NFDLabelPruned": true
          },
          "AccessLogExtraConf": {
            "GatewayLifecycle": 30,
            "SidecarLifecycle": 30,
            "GatewayEnabled": true,
            "SidecarEnabled": true
          },
          "AutoDiagnosis": {
            "AutoDiagnosisEnabled": true
          },
          "AdaptiveXdsConfiguration": {
            "Enabled": true,
            "EgressResources": {
              "Requests": {
                "cpu": "100m",
                "memory": "256Mi"
              },
              "Limits": {
                "cpu": "200m",
                "memory": "512Mi"
              }
            },
            "EgressReplicaCount": 2,
            "EgressAutoscaleEnabled": true,
            "EgressMinReplica": 1,
            "EgressMaxReplica": 2,
            "EgressHpaCpu": {
              "TargetAverageUtilization": 80
            },
            "EgressHpaMemory": {
              "TargetAverageUtilization": 80
            }
          },
          "IstiodExtraConfiguration": {
            "LabelsForOffloadedWorkloads": "name=xx,region=xx",
            "PilotEnableQuicListeners": false
          },
          "Playground": {
            "Scene": ""
          }
        }
      }
    },
    "Clusters": [
      "[\"caf089e56daba4c51a8906fe43ea1****\",\"c80f45444b3da447da60a911390c2****\"]"
    ],
    "ClusterSpec": "standard",
    "OwnerType": "ackone",
    "OwnerId": "cc3e96f249d124eb38b72718ec5*****"
  }
}

Error codes

For a list of error codes, visit the Service error codes.

Change history

Change time	Summary of changes	Operation
2024-07-18	The response structure of the API has changed	View Change Details
2024-06-26	The response structure of the API has changed	View Change Details
2024-01-29	The response structure of the API has changed	View Change Details
2024-01-27	The response structure of the API has changed	View Change Details
2024-01-27	The response structure of the API has changed	View Change Details
2023-08-31	The response structure of the API has changed	View Change Details
2023-04-13	The response structure of the API has changed	View Change Details
2022-08-31	The response structure of the API has changed	View Change Details
2021-10-28	The response structure of the API has changed	View Change Details
2021-09-06	The response structure of the API has changed	View Change Details