Parameter
| Default value of Istio
| Default value of ASM
| Description
|
clusterDomain
| cluster.local
| Specified when you create the instance
| The local domain name of the cluster. The local domain name of the ASM instance must be the same as that of the Kubernetes cluster on the data plane.
|
enableCoreDump
| false
| Same as that of the open source Istio version
| Enables the Core Dump option for the injected sidecar proxy, which is used to debug the sidecar proxy in the ASM instance.
|
excludeInboundPorts
| ""
| Same as that of the open source Istio version
| Sets inbound ports to be excluded from redirection to the sidecar proxy in the ASM instance.
|
includeInboundPorts
| "*"
| Same as that of the open source Istio version
| Sets inbound ports for which traffic is to be redirected to the sidecar proxy in the ASM instance. |
includeIPRanges
| "*"
| Same as that of the open source Istio version
| Sets IP ranges in CIDR form for which traffic is to be redirected to the sidecar proxy in the ASM instance.
|
excludeIPRanges
| ""
| Same as that of the open source Istio version
| Sets IP ranges in CIDR form to be excluded from redirection to the sidecar proxy in the ASM instance. |
includeOutboundPorts
| ""
| Same as that of the open source Istio version
| Sets outbound ports for which traffic is to be redirected to the sidecar proxy in the ASM instance. |
excludeOutboundPorts
| ""
| Same as that of the open source Istio version
| Sets outbound ports to be excluded from redirection to the sidecar proxy in the ASM instance.
|
logLevel
| warning
| Same as that of the open source Istio version
| Sets the log level of the sidecar proxy. |
readinessFailureThreshold
| 30
| Same as that of the open source Istio version
| The number of consecutive detection failures before the sidecar proxy is determined to be unready.
|
readinessInitialDelaySeconds
| 1
| Same as that of the open source Istio version
| The number of seconds before the first readiness detection of a sidecar proxy.
|
readinessPeriodSeconds
| 2
| Same as that of the open source Istio version
| The interval in seconds between two readiness detections of a sidecar proxy. |
resources
|
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 2000m
memory: 1024Mi
| Same as that of the open source Istio version
| The default resource settings of the sidecar proxy container. |
holdApplicationUntilProxyStarts
| false
| true
| Specifies whether the sidecar proxy container must be started before the service container can be started during the start of a pod. |
concurrency
| 2
| Same as that of the open source Istio version
| The number of worker threads started by Envoy. |
interceptionMode
| REDIRECT
| Same as that of the open source Istio version
| The mode in which the sidecar proxy intercepts traffic. |
tracing
|
zipkin:
address: zipkin.istio-system:9411
| N/A. ASM does not enable Tracing Analysis by default.
| The configurations of Tracing Analysis.
|
proxyMetadata
| {}
|
{
EXIT_ON_ZERO_ACTIVE_CONNECTIONS: "true"
}
| The environment variable that is added to the sidecar proxy container.
|
terminationDrainDuration
| 5s
| Same as that of the open source Istio version
| The amount of time allowed for connections to complete on sidecar proxy termination.
|
proxyStatsMatcher
| N/A
|
proxyStatsMatcher:
inclusionRegexps:
- .*adaptive_concurrency.*
| The custom Envoy metrics to be reported. |
Resources of the sidecar proxy init container
|
resources:
limits:
cpu: '2'
memory: 1Gi
requests:
cpu: 100m
memory: 128Mi
|
resources:
limits:
cpu: '2'
memory: 1Gi
requests:
cpu: 10m
memory: 10Mi
| The resource settings of the sidecar proxy init container. |
OutboundTrafficPolicy
| ALLOW_ANY
| Same as that of the open source Istio version
| The policies for accessing external services of the sidecar proxy.
|
Elastic Compute Service (ECS)
Lingma
