service-mesh.yml

ROSTemplateFormatVersion: '2015-09-01'
Description: ASM ServiceMesh resource example
Parameters:
  Name:
    Type: String
    Description: The name of the ASM instance.
  VpcId:
    Type: String
    Description: The ID of the virtual private cloud (VPC).
  VSwitches:
    Type: CommaDelimitedList
    Description: 'The ID of the vSwitch, eg: ["vsw-xzegf5dndkbf4m6eg****"]'
  OPA:
    Type: Json
    Description: OPA settings.
    Default: null
  EnableAudit:
    Type: Boolean
    Description: |-
      Specifies whether to enable the mesh audit feature. To enable this feature, make sure
      that you have activated Alibaba Cloud Log Service.
      Valid values: true and false. Default value: false.
    Default: false
    AllowedValues:
    - true
    - false
  AuditProject:
    Type: String
    Description: |-
      The name of the Log Service project that is used for mesh audit.
      Default value: mesh-log-{meshId}.
    Default: null
  IstioVersion:
    Type: String
    Description: The Istio version of the ASM instance.
    Default: null
  ApiServerPublicEip:
    Type: Boolean
    Description: |-
      Specifies whether to expose the API server to the Internet.
      Valid values: true and false. Default value: false.
      If you do not set this parameter, the API server of clusters added to the ASM instance
      cannot be accessed from the Internet.
    Default: false
    AllowedValues:
    - true
    - false
  LocalityLoadBalancing:
    Type: Boolean
    Description: |-
      Specifies whether to route traffic to the nearest instance.
      Valid values: true and false. Default value: false.
    Default: false
    AllowedValues:
    - true
    - false
  Telemetry:
    Type: Boolean
    Description: Specifies whether to enable Prometheus monitoring. We recommend that
      you use Application Real-Time Monitoring Service (ARMS).
    Default: false
    AllowedValues:
    - true
    - false
  OutboundTrafficPolicy:
    Type: String
    Description: The outbound traffic policy of the ASM instance.
    Default: null
  TraceSampling:
    Type: Number
    Description: The sampling percentage of tracing.
    Default: null
  Proxy:
    Type: Json
    Description: 'Proxy settings. '
    Default: null
  PilotPublicEip:
    Type: Boolean
    Description: |-
      Specifies whether to expose Istio Pilot to the Internet.
      Valid values: true and false. Default value: false.
      If you do not set this parameter, only clusters in the same VPC as the ASM instance
      can access Istio Pilot of the instance.
    Default: false
    AllowedValues:
    - true
    - false
  IncludeIPRanges:
    Type: String
    Description: |-
      The Classless Inter-Domain Routing (CIDR) block in the ASM instance that are denied
      to access external services.
    Default: null
  Tracing:
    Type: Boolean
    Description: |-
      Specifies whether to enable the tracing feature. To enable this feature, make sure
      that you have activated Alibaba Cloud Tracing Analysis.
      Valid values: true and false. Default value: false.
    Default: false
    AllowedValues:
    - true
    - false
  CustomizedZipkin:
    Type: Boolean
    Description: Specifies whether to use a user-created Zipkin system.
    Default: false
    AllowedValues:
    - true
    - false
Resources:
  ServiceMesh:
    Type: ALIYUN::ASM::ServiceMesh
    Properties:
      VpcId:
        Ref: VpcId
      OPA:
        Ref: OPA
      EnableAudit:
        Ref: EnableAudit
      IstioVersion:
        Ref: IstioVersion
      ApiServerPublicEip:
        Ref: ApiServerPublicEip
      LocalityLoadBalancing:
        Ref: LocalityLoadBalancing
      Telemetry:
        Ref: Telemetry
      OutboundTrafficPolicy:
        Ref: OutboundTrafficPolicy
      AuditProject:
        Ref: AuditProject
      TraceSampling:
        Ref: TraceSampling
      Name:
        Ref: Name
      Proxy:
        Ref: Proxy
      PilotPublicEip:
        Ref: PilotPublicEip
      IncludeIPRanges:
        Ref: IncludeIPRanges
      VSwitches:
        Ref: VSwitches
      Tracing:
        Ref: Tracing
      CustomizedZipkin:
        Ref: CustomizedZipkin
Outputs:
  ServiceMeshId:
    Description: The ID of the ASM instance.
    Value:
      Fn::GetAtt:
      - ServiceMesh
      - ServiceMeshId