diff --git a/docs/asm/umn/ALL_META.TXT.json b/docs/asm/umn/ALL_META.TXT.json index 048ed5f85..2e7ecabfe 100644 --- a/docs/asm/umn/ALL_META.TXT.json +++ b/docs/asm/umn/ALL_META.TXT.json @@ -20,29 +20,11 @@ "title":"Service Overview", "githuburl":"" }, - { - "uri":"asm_productdesc_0017.html", - "node_id":"asm_productdesc_0017.xml", - "product_code":"asm", - "code":"2", - "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", - "doc_type":"usermanual", - "kw":"Infographic for ASM,Service Overview,User Guide", - "search_title":"", - "metedata":[ - { - "prodname":"asm", - "documenttype":"usermanual" - } - ], - "title":"Infographic for ASM", - "githuburl":"" - }, { "uri":"asm_productdesc_0001.html", "node_id":"asm_productdesc_0001.xml", "product_code":"asm", - "code":"3", + "code":"2", "des":"Application Service Mesh (ASM) is a non-intrusive solution for you to manage microservice lifecycle and traffic. It is compatible with the Kubernetes and Istio ecosystems", "doc_type":"usermanual", "kw":"Introduction,Service Overview,User Guide", @@ -60,7 +42,7 @@ "uri":"asm_productdesc_0002.html", "node_id":"asm_productdesc_0002.xml", "product_code":"asm", - "code":"4", + "code":"3", "des":"The out-of-the-box features allow you to use a service mesh without code rewrite or manual installation.Deployment of the grayscale version and traffic switchover with a ", "doc_type":"usermanual", "kw":"Advantages,Service Overview,User Guide", @@ -78,7 +60,7 @@ "uri":"asm_productdesc_0003.html", "node_id":"asm_productdesc_0003.xml", "product_code":"asm", - "code":"5", + "code":"4", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Application Scenarios", @@ -96,7 +78,7 @@ "uri":"asm_productdesc_0011.html", "node_id":"asm_productdesc_0011.xml", "product_code":"asm", - "code":"6", + "code":"5", "des":"In traditional iterations, a new service version is directly released to all users at a time. This is risky, because once an online accident or bug occurs, the impact on ", "doc_type":"usermanual", "kw":"Grayscale Release,Application Scenarios,User Guide", @@ -114,7 +96,7 @@ "uri":"asm_productdesc_0012.html", "node_id":"asm_productdesc_0012.xml", "product_code":"asm", - "code":"7", + "code":"6", "des":"Traffic management entails a wide range of operations, including:Dynamically modifying load balancing policies for cross-service access, such as configuring consistent ha", "doc_type":"usermanual", "kw":"Service Traffic Management,Application Scenarios,User Guide", @@ -132,7 +114,7 @@ "uri":"asm_productdesc_0013.html", "node_id":"asm_productdesc_0013.xml", "product_code":"asm", - "code":"8", + "code":"7", "des":"Splitting traditional monolithic applications into microservices brings various benefits, including better flexibility, scalability, and reusability. The new security req", "doc_type":"usermanual", "kw":"End-to-End Transparency and Security,Application Scenarios,User Guide", @@ -150,7 +132,7 @@ "uri":"asm_productdesc_0014.html", "node_id":"asm_productdesc_0014.xml", "product_code":"asm", - "code":"9", + "code":"8", "des":"Container-based infrastructure brings a series of new challenges. It is necessary to evaluate and enhance the performance of API endpoints and identify potential risks of", "doc_type":"usermanual", "kw":"Service Running Monitoring,Application Scenarios,User Guide", @@ -168,7 +150,7 @@ "uri":"asm_productdesc_0015.html", "node_id":"asm_productdesc_0015.xml", "product_code":"asm", - "code":"10", + "code":"9", "des":"Using service meshes to manage services developed using traditional SDKs.Integrating Istio with microservice platforms and building a microservice management and control ", "doc_type":"usermanual", "kw":"Integration with Traditional Microservice SDKs,Application Scenarios,User Guide", @@ -186,7 +168,7 @@ "uri":"asm_productdesc_0004.html", "node_id":"asm_productdesc_0004.xml", "product_code":"asm", - "code":"11", + "code":"10", "des":"Before creating a service mesh, ensure that you have an available cluster. Cluster versions and mesh versions must meet the adaptation rules listed in Table 1.Containers ", "doc_type":"usermanual", "kw":"Notes and Constraints,Service Overview,User Guide", @@ -200,6 +182,24 @@ "title":"Notes and Constraints", "githuburl":"" }, + { + "uri":"asm_productdesc_0019.html", + "node_id":"asm_productdesc_0019.xml", + "product_code":"asm", + "code":"11", + "des":"If you need to grant your enterprise personnel permission to access your ASM resources, use Identity and Access Management (IAM). IAM provides identity authentication, fi", + "doc_type":"usermanual", + "kw":"Permissions,Service Overview,User Guide", + "search_title":"", + "metedata":[ + { + "prodname":"asm", + "documenttype":"usermanual" + } + ], + "title":"Permissions", + "githuburl":"" + }, { "uri":"asm_productdesc_0005.html", "node_id":"asm_productdesc_0005.xml", @@ -464,17 +464,83 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Application Service Mesh", "githuburl":"" }, + { + "uri":"asm_01_0141.html", + "node_id":"asm_01_0141.xml", + "product_code":"asm", + "code":"27", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Using IAM to Grant Access to ASM", + "search_title":"", + "metedata":[ + { + "prodname":"asm", + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" + } + ], + "title":"Using IAM to Grant Access to ASM", + "githuburl":"" + }, + { + "uri":"asm_01_0145.html", + "node_id":"asm_01_0145.xml", + "product_code":"asm", + "code":"28", + "des":"System-defined permissions in provided by Identity and Access Management (IAM) let you control access to ASM. With IAM, you can:Create IAM users for personnel based on y", + "doc_type":"usermanual", + "kw":"Using IAM Roles or Policies to Grant Access to ASM,Using IAM to Grant Access to ASM,User Guide", + "search_title":"", + "metedata":[ + { + "prodname":"asm", + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" + } + ], + "title":"Using IAM Roles or Policies to Grant Access to ASM", + "githuburl":"" + }, + { + "uri":"asm_01_0146.html", + "node_id":"asm_01_0146.xml", + "product_code":"asm", + "code":"29", + "des":"System-defined permissions in provided by Identity and Access Management (IAM) let you control access to ASM. With IAM, you can:Create IAM users or user groups for perso", + "doc_type":"usermanual", + "kw":"Using IAM Identity Policies to Grant Access to ASM,Using IAM to Grant Access to ASM,User Guide", + "search_title":"", + "metedata":[ + { + "prodname":"asm", + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" + } + ], + "title":"Using IAM Identity Policies to Grant Access to ASM", + "githuburl":"" + }, { "uri":"asm_01_0017.html", "node_id":"asm_01_0017.xml", "product_code":"asm", - "code":"27", + "code":"30", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Creating a Service Mesh", @@ -482,7 +548,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Creating a Service Mesh", @@ -492,7 +561,7 @@ "uri":"asm_01_0020.html", "node_id":"asm_01_0020.xml", "product_code":"asm", - "code":"28", + "code":"31", "des":"ASM allows you to create a Basic service mesh for commercial use.A CCE cluster is available.ASM depends on the domain name resolution of CoreDNS. Before creating a servic", "doc_type":"usermanual", "kw":"Creating a Service Mesh,Creating a Service Mesh,User Guide", @@ -500,7 +569,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Creating a Service Mesh", @@ -510,7 +582,7 @@ "uri":"asm_01_0023.html", "node_id":"asm_01_0023.xml", "product_code":"asm", - "code":"29", + "code":"32", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Mesh Management", @@ -518,7 +590,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Mesh Management", @@ -528,7 +603,7 @@ "uri":"asm_01_0133.html", "node_id":"asm_01_0133.xml", "product_code":"asm", - "code":"30", + "code":"33", "des":"ASM supports the event center, which allows you to query details about important operations such as service mesh creation and deletion and gateway creation and deletion.Y", "doc_type":"usermanual", "kw":"Service Mesh Events,Mesh Management,User Guide", @@ -536,7 +611,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Service Mesh Events", @@ -546,7 +624,7 @@ "uri":"asm_01_0086.html", "node_id":"asm_01_0086.xml", "product_code":"asm", - "code":"31", + "code":"34", "des":"If you no longer need a service mesh, you can uninstall it.To uninstall a service mesh in which a grayscale release task is running, you need to complete the grayscale re", "doc_type":"usermanual", "kw":"Uninstalling a Service Mesh,Mesh Management,User Guide", @@ -554,7 +632,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Uninstalling a Service Mesh", @@ -564,7 +645,7 @@ "uri":"asm_01_0029.html", "node_id":"asm_01_0029.xml", "product_code":"asm", - "code":"32", + "code":"35", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Service Management", @@ -572,7 +653,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Service Management", @@ -582,7 +666,7 @@ "uri":"asm_01_0031.html", "node_id":"asm_01_0031.xml", "product_code":"asm", - "code":"33", + "code":"36", "des":"ASM diagnoses all services in a managed cluster. Traffic management and grayscale release are available only for normal services.If multiple services correspond to one de", "doc_type":"usermanual", "kw":"Configuration Diagnosis,Service Management,User Guide", @@ -590,7 +674,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Configuration Diagnosis", @@ -600,7 +687,7 @@ "uri":"asm_01_0060.html", "node_id":"asm_01_0060.xml", "product_code":"asm", - "code":"34", + "code":"37", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Fixing Items Manually", @@ -608,7 +695,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Fixing Items Manually", @@ -618,7 +708,7 @@ "uri":"asm_01_0061.html", "node_id":"asm_01_0061.xml", "product_code":"asm", - "code":"35", + "code":"38", "des":"All pods of a Service must be labeled with app and version. app traces traffic in traffic monitoring, and version distinguishes different versions in grayscale release. I", "doc_type":"usermanual", "kw":"All Pods Have the app and version Labels,Fixing Items Manually,User Guide", @@ -626,7 +716,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"All Pods Have the app and version Labels", @@ -636,7 +729,7 @@ "uri":"asm_01_0062.html", "node_id":"asm_01_0062.xml", "product_code":"asm", - "code":"36", + "code":"39", "des":"All pods of a Service must share the same app and version labels. app traces traffic in traffic monitoring, and version distinguishes different versions in grayscale rele", "doc_type":"usermanual", "kw":"All Pods Share the Same app and version Labels,Fixing Items Manually,User Guide", @@ -644,7 +737,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"All Pods Share the Same app and version Labels", @@ -654,7 +750,7 @@ "uri":"asm_01_0063.html", "node_id":"asm_01_0063.xml", "product_code":"asm", - "code":"37", + "code":"40", "des":"An istio-proxy container must exist in all pods of a Service. Otherwise, this item is abnormal.If the sidecar is not injected into the namespace, go to 2.If the sidecar h", "doc_type":"usermanual", "kw":"All Pods Have Sidecars Injected,Fixing Items Manually,User Guide", @@ -662,7 +758,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"All Pods Have Sidecars Injected", @@ -672,7 +771,7 @@ "uri":"asm_01_0065.html", "node_id":"asm_01_0065.xml", "product_code":"asm", - "code":"38", + "code":"41", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Fixing Items Automatically", @@ -680,7 +779,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Fixing Items Automatically", @@ -690,7 +792,7 @@ "uri":"asm_01_0066.html", "node_id":"asm_01_0066.xml", "product_code":"asm", - "code":"39", + "code":"42", "des":"The Service port name must contain the specified protocol and prefix and must be in the following format: can be http, tcp, or grpc. Istio provides routing capa", "doc_type":"usermanual", "kw":"The Service Port Name Complies with the Istio Specifications,Fixing Items Automatically,User Guide", @@ -698,7 +800,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"The Service Port Name Complies with the Istio Specifications", @@ -708,7 +813,7 @@ "uri":"asm_01_0067.html", "node_id":"asm_01_0067.xml", "product_code":"asm", - "code":"40", + "code":"43", "des":"The spec.selector of a Service cannot be labeled with version. Otherwise, this item is abnormal.", "doc_type":"usermanual", "kw":"The Service Selector Cannot Contain version Labels,Fixing Items Automatically,User Guide", @@ -716,7 +821,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"The Service Selector Cannot Contain version Labels", @@ -726,7 +834,7 @@ "uri":"asm_01_0069.html", "node_id":"asm_01_0069.xml", "product_code":"asm", - "code":"41", + "code":"44", "des":"Istio defines service traffic routing rules in VirtualService and DestinationRule. Therefore, you need to configure VirtualService and DestinationRule for each service. T", "doc_type":"usermanual", "kw":"The Service Is Configured with a Default-Version Route and the Route Configuration Is Correct,Fixing", @@ -734,7 +842,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"The Service Is Configured with a Default-Version Route and the Route Configuration Is Correct", @@ -744,7 +855,7 @@ "uri":"asm_01_0033.html", "node_id":"asm_01_0033.xml", "product_code":"asm", - "code":"42", + "code":"45", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Gateway Management", @@ -752,7 +863,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Gateway Management", @@ -762,7 +876,7 @@ "uri":"asm_01_0056.html", "node_id":"asm_01_0056.xml", "product_code":"asm", - "code":"43", + "code":"46", "des":"A gateway enables unified entry, traffic management, security, and service isolation.Gateways use load balancers of ELB to provide network access. Before adding a gateway", "doc_type":"usermanual", "kw":"Adding a Gateway,Gateway Management,User Guide", @@ -770,7 +884,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Adding a Gateway", @@ -780,7 +897,7 @@ "uri":"asm_01_0057.html", "node_id":"asm_01_0057.xml", "product_code":"asm", - "code":"44", + "code":"47", "des":"You can add multiple routes and configure multiple forwarding policies for a created gateway.Domain NameEnter the external domain name of the service. If this parameter i", "doc_type":"usermanual", "kw":"Adding a Route,Gateway Management,User Guide", @@ -788,7 +905,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Adding a Route", @@ -798,7 +918,7 @@ "uri":"asm_01_0034.html", "node_id":"asm_01_0034.xml", "product_code":"asm", - "code":"45", + "code":"48", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Grayscale Release", @@ -806,7 +926,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Grayscale Release", @@ -816,7 +939,7 @@ "uri":"asm_01_0035.html", "node_id":"asm_01_0035.xml", "product_code":"asm", - "code":"46", + "code":"49", "des":"When switching between old and new services, you may be challenged in ensuring the system service continuity. If a new service version is directly released to all users a", "doc_type":"usermanual", "kw":"Grayscale Release Overview,Grayscale Release,User Guide", @@ -824,7 +947,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Grayscale Release Overview", @@ -834,7 +960,7 @@ "uri":"asm_01_0036.html", "node_id":"asm_01_0036.xml", "product_code":"asm", - "code":"47", + "code":"50", "des":"Grayscale versionOnly one grayscale version can be released for a service. You can configure grayscale policies for the version.Only one grayscale version can be released", "doc_type":"usermanual", "kw":"Grayscale version,Grayscale policy,Creating a Grayscale Release Task,Grayscale Release,User Guide", @@ -842,7 +968,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Creating a Grayscale Release Task", @@ -852,7 +981,7 @@ "uri":"asm_01_0037.html", "node_id":"asm_01_0037.xml", "product_code":"asm", - "code":"48", + "code":"51", "des":"Basic operations on a grayscale version are performed by modifying the configuration of the DestinationRule and VirtualService resources of Istio. After the modification ", "doc_type":"usermanual", "kw":"Basic Operations on a Grayscale Task,Grayscale Release,User Guide", @@ -860,7 +989,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Basic Operations on a Grayscale Task", @@ -870,7 +1002,7 @@ "uri":"asm_01_0038.html", "node_id":"asm_01_0038.xml", "product_code":"asm", - "code":"49", + "code":"52", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Mesh Configuration", @@ -878,7 +1010,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Mesh Configuration", @@ -888,7 +1023,7 @@ "uri":"asm_01_0039.html", "node_id":"asm_01_0039.xml", "product_code":"asm", - "code":"50", + "code":"53", "des":"Mesh configuration provides cluster management, sidecar management, Istio resource management, and upgrade capabilities.The mesh control plane workloads inject and manage", "doc_type":"usermanual", "kw":"mesh control plane,Overview,Mesh Configuration,User Guide", @@ -896,7 +1031,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Overview", @@ -906,7 +1044,7 @@ "uri":"asm_01_0041.html", "node_id":"asm_01_0041.xml", "product_code":"asm", - "code":"51", + "code":"54", "des":"On the Sidecar Management tab, you can view information about all workloads injected with sidecars, inject sidecars, and configure sidecar resource limits.You can view th", "doc_type":"usermanual", "kw":"Sidecar Management,Mesh Configuration,User Guide", @@ -914,7 +1052,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Sidecar Management", @@ -924,7 +1065,7 @@ "uri":"asm_01_0091.html", "node_id":"asm_01_0091.xml", "product_code":"asm", - "code":"52", + "code":"55", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Istio Resource Management", @@ -932,7 +1073,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Istio Resource Management", @@ -942,7 +1086,7 @@ "uri":"asm_01_0048.html", "node_id":"asm_01_0048.xml", "product_code":"asm", - "code":"53", + "code":"56", "des":"You can modify all Istio resources (such as VirtualService and DestinationRule) of a service in YAML or JSON format on the Istio Resource Management page. You can also cr", "doc_type":"usermanual", "kw":"Configuring Istio Resources Using YAML,Istio Resource Management,User Guide", @@ -950,7 +1094,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Configuring Istio Resources Using YAML", @@ -960,7 +1107,7 @@ "uri":"asm_01_0082.html", "node_id":"asm_01_0082.xml", "product_code":"asm", - "code":"54", + "code":"57", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Upgrades", @@ -968,7 +1115,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Upgrades", @@ -978,7 +1128,7 @@ "uri":"asm_01_0095.html", "node_id":"asm_01_0095.xml", "product_code":"asm", - "code":"55", + "code":"58", "des":"Istio 1.15.7 is supported.CCE Turbo clusters v1.21, v1.23, v1.25, and v1.27 are supported.CCE clusters v1.21, v1.23, v1.25, and v1.27 are supported.Security vulnerabiliti", "doc_type":"usermanual", "kw":"Features in v1.15,Upgrades,User Guide", @@ -986,7 +1136,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Features in v1.15", @@ -996,15 +1149,18 @@ "uri":"asm_01_0124.html", "node_id":"asm_01_0124.xml", "product_code":"asm", - "code":"56", - "des":"Istio 1.18 is supported.CCE Turbo clusters v1.25, v1.27, v1.28, v1.29, and v1.30, as well as v1.31 are supported.CCE clusters v1.25, v1.27, v1.28, v1.29, and v1.30, as we", + "code":"59", + "des":"Istio 1.18 is supported.CCE Turbo clusters v1.25, v1.27, v1.28, v1.29, v1.30, and v1.31, as well as v1.32 and v1.33 are supported.CCE clusters v1.25, v1.27, v1.28, v1.29,", "doc_type":"usermanual", "kw":"Features in v1.18,Upgrades,User Guide", "search_title":"", "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Features in v1.18", @@ -1014,7 +1170,7 @@ "uri":"asm_01_0085.html", "node_id":"asm_01_0085.xml", "product_code":"asm", - "code":"57", + "code":"60", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Traffic Management", @@ -1022,7 +1178,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Traffic Management", @@ -1032,7 +1191,7 @@ "uri":"asm_01_0049.html", "node_id":"asm_01_0049.xml", "product_code":"asm", - "code":"58", + "code":"61", "des":"Non-intrusive traffic management is a core function of Istio. With traffic management, you only need to focus on your own service logic rather than service access managem", "doc_type":"usermanual", "kw":"Overview,Traffic Management,User Guide", @@ -1040,7 +1199,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Overview", @@ -1050,7 +1212,7 @@ "uri":"asm_01_0050.html", "node_id":"asm_01_0050.xml", "product_code":"asm", - "code":"59", + "code":"62", "des":"RetryAuto retries upon service access failures improve the access quality and success rate.On the Retry tab, click Configure now. In the displayed dialog box, set the par", "doc_type":"usermanual", "kw":"Configuring a Traffic Policy,Traffic Management,User Guide", @@ -1058,7 +1220,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Configuring a Traffic Policy", @@ -1068,7 +1233,7 @@ "uri":"asm_01_0052.html", "node_id":"asm_01_0052.xml", "product_code":"asm", - "code":"60", + "code":"63", "des":"You can change the settings of a configured traffic policy. For example, you can change the load balancing algorithm from Round robin to Random.", "doc_type":"usermanual", "kw":"Changing a Traffic Policy,Traffic Management,User Guide", @@ -1076,7 +1241,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Changing a Traffic Policy", @@ -1086,7 +1254,7 @@ "uri":"asm_01_0087.html", "node_id":"asm_01_0087.xml", "product_code":"asm", - "code":"61", + "code":"64", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Security", @@ -1094,7 +1262,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Security", @@ -1104,7 +1275,7 @@ "uri":"asm_01_0088.html", "node_id":"asm_01_0088.xml", "product_code":"asm", - "code":"62", + "code":"65", "des":"ASM security functions include Access Authorization, Peer Authentication, JWT Authentication to ensure the reliable service communication.Access AuthorizationAccess autho", "doc_type":"usermanual", "kw":"Configuring a Security Policy,Security,User Guide", @@ -1112,7 +1283,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Configuring a Security Policy", @@ -1122,7 +1296,7 @@ "uri":"asm_01_0096.html", "node_id":"asm_01_0096.xml", "product_code":"asm", - "code":"63", + "code":"66", "des":"JWT is an authentication mode in which the server issues tokens to the client. When a user logs in to the client using the username and password, the server generates and", "doc_type":"usermanual", "kw":"JWT Authentication Principles,Security,User Guide", @@ -1130,7 +1304,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"JWT Authentication Principles", @@ -1140,7 +1317,7 @@ "uri":"asm_01_0097.html", "node_id":"asm_01_0097.xml", "product_code":"asm", - "code":"64", + "code":"67", "des":"This section describes how to authenticate JWT requests on the ingress gateway using ASM to ensure that users access services through the ingress gateway with a reliable ", "doc_type":"usermanual", "kw":"Authenticating JWT Requests on the Ingress Gateway Using ASM,Security,User Guide", @@ -1148,7 +1325,10 @@ "metedata":[ { "prodname":"asm", - "documenttype":"usermanual" + "documenttype":"usermanual", + "IsBot":"Yes;yes", + "IsMulti":"Yes;yes", + "opensource":"false;true" } ], "title":"Authenticating JWT Requests on the Ingress Gateway Using ASM", @@ -1158,7 +1338,7 @@ "uri":"asm_bp_0001.html", "node_id":"asm_bp_0001.xml", "product_code":"asm", - "code":"65", + "code":"68", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Best Practices", @@ -1176,7 +1356,7 @@ "uri":"asm_bestpractice_0003.html", "node_id":"asm_bestpractice_0003.xml", "product_code":"asm", - "code":"66", + "code":"69", "des":"ASM enables you to manage the traffic of services added into a service mesh. Sidecars are important components in ASM data plane. The upgrade of sidecars involves the re-", "doc_type":"usermanual", "kw":"Upgrading Data Plane Sidecars Without Service Interruption,Best Practices,User Guide", @@ -1194,7 +1374,7 @@ "uri":"asm_bestpractice_3001.html", "node_id":"asm_bestpractice_3001.xml", "product_code":"asm", - "code":"67", + "code":"70", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Service Governance for Dubbo-based Applications", @@ -1212,7 +1392,7 @@ "uri":"asm_bestpractice_3002.html", "node_id":"asm_bestpractice_3002.xml", "product_code":"asm", - "code":"68", + "code":"71", "des":"Dubbo is a special protocol. The following functions must be provided:Envoy on the service mesh data plane parses protocols and manages traffic of Dubbo.The service mesh ", "doc_type":"usermanual", "kw":"Introduction,Service Governance for Dubbo-based Applications,User Guide", @@ -1230,7 +1410,7 @@ "uri":"asm_bestpractice_3008.html", "node_id":"asm_bestpractice_3008.xml", "product_code":"asm", - "code":"69", + "code":"72", "des":"Problems in the existing Dubbo model (summarized from the Dubbo community version 2.7.4):In the microservice architecture, the Registry manages applications (services) in", "doc_type":"usermanual", "kw":"Service Discovery Model,Service Governance for Dubbo-based Applications,User Guide", @@ -1248,7 +1428,7 @@ "uri":"asm_bestpractice_3003.html", "node_id":"asm_bestpractice_3003.xml", "product_code":"asm", - "code":"70", + "code":"73", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"SDK Adaptation Mode", @@ -1266,7 +1446,7 @@ "uri":"asm_bestpractice_3004.html", "node_id":"asm_bestpractice_3004.xml", "product_code":"asm", - "code":"71", + "code":"74", "des":"When the client in the SDK calls the target service by an interface, the client accesses the service name, instead of the service instance.Cases are different based on th", "doc_type":"usermanual", "kw":"PASSTHROUGH Solution,SDK Adaptation Mode,User Guide", @@ -1284,7 +1464,7 @@ "uri":"asm_bestpractice_3005.html", "node_id":"asm_bestpractice_3005.xml", "product_code":"asm", - "code":"72", + "code":"75", "des":"Use dubbo:reference to configure the referenced service provider in the service consumer of the Dubbo service. Use the url option to define the address of the point-to-po", "doc_type":"usermanual", "kw":"Static Target Service,SDK Adaptation Mode,User Guide", @@ -1302,7 +1482,7 @@ "uri":"asm_bestpractice_1009.html", "node_id":"asm_bestpractice_1009.xml", "product_code":"asm", - "code":"73", + "code":"76", "des":"You can create a CCE cluster with IPv4/IPv6 dual stack enabled and enable IPv4/IPv6 dual stack for the service mesh that the cluster is added to. IPv4/IPv6 dual stack all", "doc_type":"usermanual", "kw":"How Do I Create a Service Mesh with IPv4/IPv6 Dual Stack Enabled,Best Practices,User Guide", @@ -1320,7 +1500,7 @@ "uri":"asm_faq_0001_0.html", "node_id":"asm_faq_0001_0.xml", "product_code":"asm", - "code":"74", + "code":"77", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"FAQs", @@ -1338,7 +1518,7 @@ "uri":"asm_faq_0029.html", "node_id":"asm_faq_0029.xml", "product_code":"asm", - "code":"75", + "code":"78", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Service Mesh Cluster", @@ -1356,7 +1536,7 @@ "uri":"asm_faq_0030.html", "node_id":"asm_faq_0030.xml", "product_code":"asm", - "code":"76", + "code":"79", "des":"After I enable a service mesh (create a service mesh) for a CCE cluster, it remains in the installing state for a long time and a message is displayed indicating that the", "doc_type":"usermanual", "kw":"Why Does an Enabled Service Mesh Remain in the Installing State for a Long Time?,Service Mesh Cluste", @@ -1374,7 +1554,7 @@ "uri":"asm_faq_0031.html", "node_id":"asm_faq_0031.xml", "product_code":"asm", - "code":"77", + "code":"80", "des":"On the ASM console, after I uninstall a service mesh, it remains in the unready state for a long time.The Status of istio-master is Uninstallation Failed, and the followi", "doc_type":"usermanual", "kw":"Why Does an Uninstalled Service Mesh Remain in the Unready State for a Long Time?,Service Mesh Clust", @@ -1392,7 +1572,7 @@ "uri":"asm_faq_0019.html", "node_id":"asm_faq_0019.xml", "product_code":"asm", - "code":"78", + "code":"81", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Mesh Management", @@ -1410,7 +1590,7 @@ "uri":"asm_faq_0020.html", "node_id":"asm_faq_0020.xml", "product_code":"asm", - "code":"79", + "code":"82", "des":"I cannot create a service mesh for my cluster.Currently, clusters earlier than v1.21 cannot be managed by service meshes.", "doc_type":"usermanual", "kw":"Why Cannot I Create a Service Mesh for My Cluster?,Mesh Management,User Guide", @@ -1428,7 +1608,7 @@ "uri":"asm_faq_0022.html", "node_id":"asm_faq_0022.xml", "product_code":"asm", - "code":"80", + "code":"83", "des":"After Istio is uninstalled, exclusive nodes still exist.Only Istio control plane workloads will be deleted when you uninstall Istio for a cluster. Node resources will not", "doc_type":"usermanual", "kw":"Why Are Exclusive Nodes Still Exist After Istio Is Uninstalled?,Mesh Management,User Guide", @@ -1446,7 +1626,7 @@ "uri":"asm_faq_0036.html", "node_id":"asm_faq_0036.xml", "product_code":"asm", - "code":"81", + "code":"84", "des":"When injecting a sidecar to the namespace of a cluster, if the namespace injection is not enabled in the cluster, perform the following steps:If the following information", "doc_type":"usermanual", "kw":"How Do I Enable Namespace Injection for a Cluster?,Mesh Management,User Guide", @@ -1464,7 +1644,7 @@ "uri":"asm_faq_0037.html", "node_id":"asm_faq_0037.xml", "product_code":"asm", - "code":"82", + "code":"85", "des":"If sidecar injection is enabled for a namespace of a cluster, sidecars are automatically injected for the pods of all workloads in the namespace. To prevent sidecars from", "doc_type":"usermanual", "kw":"How Do I Disable Sidecar Injection for Workloads?,Mesh Management,User Guide", @@ -1482,7 +1662,7 @@ "uri":"asm_faq_0039.html", "node_id":"asm_faq_0039.xml", "product_code":"asm", - "code":"83", + "code":"86", "des":"Pods of services managed by a mesh may fail to be started and keep restarting. When the service container communicates with external systems, the traffic passes through t", "doc_type":"usermanual", "kw":"What Can I Do If a Pod Cannot Be Started Due to Unready Sidecar?,Mesh Management,User Guide", @@ -1500,7 +1680,7 @@ "uri":"asm_faq_0044.html", "node_id":"asm_faq_0044.xml", "product_code":"asm", - "code":"84", + "code":"87", "des":"There are many reasons for a canary upgrade failure. In case of a canary upgrade failure, you can use the following solutions to handle it.Failed to check custom resource", "doc_type":"usermanual", "kw":"How Do I Handle a Canary Upgrade Failure?,Mesh Management,User Guide", @@ -1518,7 +1698,7 @@ "uri":"asm_faq_0001.html", "node_id":"asm_faq_0001.xml", "product_code":"asm", - "code":"85", + "code":"88", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Adding a Service", @@ -1536,7 +1716,7 @@ "uri":"asm_faq_0003.html", "node_id":"asm_faq_0003.xml", "product_code":"asm", - "code":"86", + "code":"89", "des":"The possible cause is that the Gateway-related resource configurations are missing or incorrect. Do as follows to locate the fault:Log in to the Elastic Load Balance cons", "doc_type":"usermanual", "kw":"What Do I Do If an Added Gateway Does Not Take Effect?,Adding a Service,User Guide", @@ -1554,7 +1734,7 @@ "uri":"asm_faq_0004.html", "node_id":"asm_faq_0004.xml", "product_code":"asm", - "code":"87", + "code":"90", "des":"The demo application contains the productpage, details, ratings, and reviews services. All related workloads and Istio resources including DestinationRule, VirtualService", "doc_type":"usermanual", "kw":"Why Does It Take a Long Time to Start the Demo Application in Experiencing Service Mesh in One Click", @@ -1572,7 +1752,7 @@ "uri":"asm_faq_0005.html", "node_id":"asm_faq_0005.xml", "product_code":"asm", - "code":"88", + "code":"91", "des":"The page of the deployed demo application cannot be accessed.The load balancer configured for the application does not listen to the port.Log in to the Elastic Load Balan", "doc_type":"usermanual", "kw":"Why Cannot I Access the Page of the Deployed Demo Application?,Adding a Service,User Guide", @@ -1590,7 +1770,7 @@ "uri":"asm_faq_0035.html", "node_id":"asm_faq_0035.xml", "product_code":"asm", - "code":"89", + "code":"92", "des":"During adding a route, the target service is filtered based on the corresponding gateway protocol. The filtering rules are as follows:For an HTTP gateway, select an HTTP ", "doc_type":"usermanual", "kw":"Why Cannot I Select the Corresponding Service When Adding a Route?,Adding a Service,User Guide", @@ -1608,7 +1788,7 @@ "uri":"asm_faq_0006.html", "node_id":"asm_faq_0006.xml", "product_code":"asm", - "code":"90", + "code":"93", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Performing Grayscale Release", @@ -1626,7 +1806,7 @@ "uri":"asm_faq_0007.html", "node_id":"asm_faq_0007.xml", "product_code":"asm", - "code":"91", + "code":"94", "des":"When I perform a grayscale release, the image used for the grayscale version cannot be changed.When performing the grayscale release on a service, you can only change the", "doc_type":"usermanual", "kw":"Why Can't I Change the Image Used for the Grayscale Version When Performing a Grayscale Release?,Per", @@ -1644,7 +1824,7 @@ "uri":"asm_faq_0008.html", "node_id":"asm_faq_0008.xml", "product_code":"asm", - "code":"92", + "code":"95", "des":"A grayscale policy that based on request content does not take effect on some services.A grayscale policy based on request content is valid only for the entry service tha", "doc_type":"usermanual", "kw":"Why Does Not a Grayscale Policy that Based on Request Content Take Effect for Some Services?,Perform", @@ -1662,7 +1842,7 @@ "uri":"asm_faq_0014.html", "node_id":"asm_faq_0014.xml", "product_code":"asm", - "code":"93", + "code":"96", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Monitoring Traffic", @@ -1680,7 +1860,7 @@ "uri":"asm_faq_0015.html", "node_id":"asm_faq_0015.xml", "product_code":"asm", - "code":"94", + "code":"97", "des":"Check whether APM has been enabled for the cluster.Traffic monitoring aggregates the collected data. Please wait for a minute for the data to be displayed on the Traffic ", "doc_type":"usermanual", "kw":"Why Cannot I View Traffic Monitoring Data Immediately After a Pod Is Started?,Monitoring Traffic,Use", @@ -1698,7 +1878,7 @@ "uri":"asm_faq_0016.html", "node_id":"asm_faq_0016.xml", "product_code":"asm", - "code":"95", + "code":"98", "des":"The latency statistics displayed on the Dashboard page are data of the services that have the highest latency among all the services in all the clusters of your account w", "doc_type":"usermanual", "kw":"Why Are the Latency Statistics on the Dashboard Page Inaccurate?,Monitoring Traffic,User Guide", @@ -1716,7 +1896,7 @@ "uri":"asm_faq_0017.html", "node_id":"asm_faq_0017.xml", "product_code":"asm", - "code":"96", + "code":"99", "des":"The traffic ratio data is polled every 10 seconds, while the traffic monitoring data shows the traffic situation of the last 10 seconds.", "doc_type":"usermanual", "kw":"Why Is the Traffic Ratio Inconsistent with That in the Traffic Monitoring Chart?,Monitoring Traffic,", @@ -1734,7 +1914,7 @@ "uri":"asm_faq_0018.html", "node_id":"asm_faq_0018.xml", "product_code":"asm", - "code":"97", + "code":"100", "des":"For performance purposes, the sampling rate of tracing is 10%. That is, 10 of your 100 requests are recorded and displayed on the page.", "doc_type":"usermanual", "kw":"Why Can't I Find Certain Error Requests in Tracing?,Monitoring Traffic,User Guide", @@ -1752,7 +1932,7 @@ "uri":"asm_faq_0023.html", "node_id":"asm_faq_0023.xml", "product_code":"asm", - "code":"98", + "code":"101", "des":"Select a mesh, cluster, and namespace to monitor service traffic.Check whether the ICAgent collector is correctly installed in the cluster.Check whether the service has b", "doc_type":"usermanual", "kw":"Why Cannot I Find My Service in the Traffic Monitoring Topology?,Monitoring Traffic,User Guide", @@ -1770,7 +1950,7 @@ "uri":"asm_faq_0049.html", "node_id":"asm_faq_0049.xml", "product_code":"asm", - "code":"99", + "code":"102", "des":"ASM can export traces to Jaeger or Zipkin. You can view them on the Jaeger or Zipkin UI. The following uses Zipkin as an example.The cluster and namespace where Zipkin is", "doc_type":"usermanual", "kw":"How Do I Connect a Service Mesh to Jaeger or Zipkin for Viewing Traces?,Monitoring Traffic,User Guid", @@ -1788,7 +1968,7 @@ "uri":"asm_his_0001.html", "node_id":"asm_his_0001.xml", "product_code":"asm", - "code":"100", + "code":"103", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Change History,User Guide", diff --git a/docs/asm/umn/CLASS.TXT.json b/docs/asm/umn/CLASS.TXT.json index 6bf3eeb67..9226f291a 100644 --- a/docs/asm/umn/CLASS.TXT.json +++ b/docs/asm/umn/CLASS.TXT.json @@ -8,15 +8,6 @@ "p_code":"", "code":"1" }, - { - "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", - "product_code":"asm", - "title":"Infographic for ASM", - "uri":"asm_productdesc_0017.html", - "doc_type":"usermanual", - "p_code":"1", - "code":"2" - }, { "desc":"Application Service Mesh (ASM) is a non-intrusive solution for you to manage microservice lifecycle and traffic. It is compatible with the Kubernetes and Istio ecosystems", "product_code":"asm", @@ -24,7 +15,7 @@ "uri":"asm_productdesc_0001.html", "doc_type":"usermanual", "p_code":"1", - "code":"3" + "code":"2" }, { "desc":"The out-of-the-box features allow you to use a service mesh without code rewrite or manual installation.Deployment of the grayscale version and traffic switchover with a ", @@ -33,7 +24,7 @@ "uri":"asm_productdesc_0002.html", "doc_type":"usermanual", "p_code":"1", - "code":"4" + "code":"3" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -42,7 +33,7 @@ "uri":"asm_productdesc_0003.html", "doc_type":"usermanual", "p_code":"1", - "code":"5" + "code":"4" }, { "desc":"In traditional iterations, a new service version is directly released to all users at a time. This is risky, because once an online accident or bug occurs, the impact on ", @@ -50,8 +41,8 @@ "title":"Grayscale Release", "uri":"asm_productdesc_0011.html", "doc_type":"usermanual", - "p_code":"5", - "code":"6" + "p_code":"4", + "code":"5" }, { "desc":"Traffic management entails a wide range of operations, including:Dynamically modifying load balancing policies for cross-service access, such as configuring consistent ha", @@ -59,8 +50,8 @@ "title":"Service Traffic Management", "uri":"asm_productdesc_0012.html", "doc_type":"usermanual", - "p_code":"5", - "code":"7" + "p_code":"4", + "code":"6" }, { "desc":"Splitting traditional monolithic applications into microservices brings various benefits, including better flexibility, scalability, and reusability. The new security req", @@ -68,8 +59,8 @@ "title":"End-to-End Transparency and Security", "uri":"asm_productdesc_0013.html", "doc_type":"usermanual", - "p_code":"5", - "code":"8" + "p_code":"4", + "code":"7" }, { "desc":"Container-based infrastructure brings a series of new challenges. It is necessary to evaluate and enhance the performance of API endpoints and identify potential risks of", @@ -77,8 +68,8 @@ "title":"Service Running Monitoring", "uri":"asm_productdesc_0014.html", "doc_type":"usermanual", - "p_code":"5", - "code":"9" + "p_code":"4", + "code":"8" }, { "desc":"Using service meshes to manage services developed using traditional SDKs.Integrating Istio with microservice platforms and building a microservice management and control ", @@ -86,8 +77,8 @@ "title":"Integration with Traditional Microservice SDKs", "uri":"asm_productdesc_0015.html", "doc_type":"usermanual", - "p_code":"5", - "code":"10" + "p_code":"4", + "code":"9" }, { "desc":"Before creating a service mesh, ensure that you have an available cluster. Cluster versions and mesh versions must meet the adaptation rules listed in Table 1.Containers ", @@ -96,6 +87,15 @@ "uri":"asm_productdesc_0004.html", "doc_type":"usermanual", "p_code":"1", + "code":"10" + }, + { + "desc":"If you need to grant your enterprise personnel permission to access your ASM resources, use Identity and Access Management (IAM). IAM provides identity authentication, fi", + "product_code":"asm", + "title":"Permissions", + "uri":"asm_productdesc_0019.html", + "doc_type":"usermanual", + "p_code":"1", "code":"11" }, { @@ -233,6 +233,33 @@ "p_code":"25", "code":"26" }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"asm", + "title":"Using IAM to Grant Access to ASM", + "uri":"asm_01_0141.html", + "doc_type":"usermanual", + "p_code":"25", + "code":"27" + }, + { + "desc":"System-defined permissions in provided by Identity and Access Management (IAM) let you control access to ASM. With IAM, you can:Create IAM users for personnel based on y", + "product_code":"asm", + "title":"Using IAM Roles or Policies to Grant Access to ASM", + "uri":"asm_01_0145.html", + "doc_type":"usermanual", + "p_code":"27", + "code":"28" + }, + { + "desc":"System-defined permissions in provided by Identity and Access Management (IAM) let you control access to ASM. With IAM, you can:Create IAM users or user groups for perso", + "product_code":"asm", + "title":"Using IAM Identity Policies to Grant Access to ASM", + "uri":"asm_01_0146.html", + "doc_type":"usermanual", + "p_code":"27", + "code":"29" + }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "product_code":"asm", @@ -240,7 +267,7 @@ "uri":"asm_01_0017.html", "doc_type":"usermanual", "p_code":"25", - "code":"27" + "code":"30" }, { "desc":"ASM allows you to create a Basic service mesh for commercial use.A CCE cluster is available.ASM depends on the domain name resolution of CoreDNS. Before creating a servic", @@ -248,8 +275,8 @@ "title":"Creating a Service Mesh", "uri":"asm_01_0020.html", "doc_type":"usermanual", - "p_code":"27", - "code":"28" + "p_code":"30", + "code":"31" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -258,7 +285,7 @@ "uri":"asm_01_0023.html", "doc_type":"usermanual", "p_code":"25", - "code":"29" + "code":"32" }, { "desc":"ASM supports the event center, which allows you to query details about important operations such as service mesh creation and deletion and gateway creation and deletion.Y", @@ -266,8 +293,8 @@ "title":"Service Mesh Events", "uri":"asm_01_0133.html", "doc_type":"usermanual", - "p_code":"29", - "code":"30" + "p_code":"32", + "code":"33" }, { "desc":"If you no longer need a service mesh, you can uninstall it.To uninstall a service mesh in which a grayscale release task is running, you need to complete the grayscale re", @@ -275,8 +302,8 @@ "title":"Uninstalling a Service Mesh", "uri":"asm_01_0086.html", "doc_type":"usermanual", - "p_code":"29", - "code":"31" + "p_code":"32", + "code":"34" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -285,7 +312,7 @@ "uri":"asm_01_0029.html", "doc_type":"usermanual", "p_code":"25", - "code":"32" + "code":"35" }, { "desc":"ASM diagnoses all services in a managed cluster. Traffic management and grayscale release are available only for normal services.If multiple services correspond to one de", @@ -293,8 +320,8 @@ "title":"Configuration Diagnosis", "uri":"asm_01_0031.html", "doc_type":"usermanual", - "p_code":"32", - "code":"33" + "p_code":"35", + "code":"36" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -302,8 +329,8 @@ "title":"Fixing Items Manually", "uri":"asm_01_0060.html", "doc_type":"usermanual", - "p_code":"32", - "code":"34" + "p_code":"35", + "code":"37" }, { "desc":"All pods of a Service must be labeled with app and version. app traces traffic in traffic monitoring, and version distinguishes different versions in grayscale release. I", @@ -311,8 +338,8 @@ "title":"All Pods Have the app and version Labels", "uri":"asm_01_0061.html", "doc_type":"usermanual", - "p_code":"34", - "code":"35" + "p_code":"37", + "code":"38" }, { "desc":"All pods of a Service must share the same app and version labels. app traces traffic in traffic monitoring, and version distinguishes different versions in grayscale rele", @@ -320,8 +347,8 @@ "title":"All Pods Share the Same app and version Labels", "uri":"asm_01_0062.html", "doc_type":"usermanual", - "p_code":"34", - "code":"36" + "p_code":"37", + "code":"39" }, { "desc":"An istio-proxy container must exist in all pods of a Service. Otherwise, this item is abnormal.If the sidecar is not injected into the namespace, go to 2.If the sidecar h", @@ -329,8 +356,8 @@ "title":"All Pods Have Sidecars Injected", "uri":"asm_01_0063.html", "doc_type":"usermanual", - "p_code":"34", - "code":"37" + "p_code":"37", + "code":"40" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -338,8 +365,8 @@ "title":"Fixing Items Automatically", "uri":"asm_01_0065.html", "doc_type":"usermanual", - "p_code":"32", - "code":"38" + "p_code":"35", + "code":"41" }, { "desc":"The Service port name must contain the specified protocol and prefix and must be in the following format: can be http, tcp, or grpc. Istio provides routing capa", @@ -347,8 +374,8 @@ "title":"The Service Port Name Complies with the Istio Specifications", "uri":"asm_01_0066.html", "doc_type":"usermanual", - "p_code":"38", - "code":"39" + "p_code":"41", + "code":"42" }, { "desc":"The spec.selector of a Service cannot be labeled with version. Otherwise, this item is abnormal.", @@ -356,8 +383,8 @@ "title":"The Service Selector Cannot Contain version Labels", "uri":"asm_01_0067.html", "doc_type":"usermanual", - "p_code":"38", - "code":"40" + "p_code":"41", + "code":"43" }, { "desc":"Istio defines service traffic routing rules in VirtualService and DestinationRule. Therefore, you need to configure VirtualService and DestinationRule for each service. T", @@ -365,8 +392,8 @@ "title":"The Service Is Configured with a Default-Version Route and the Route Configuration Is Correct", "uri":"asm_01_0069.html", "doc_type":"usermanual", - "p_code":"38", - "code":"41" + "p_code":"41", + "code":"44" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -375,7 +402,7 @@ "uri":"asm_01_0033.html", "doc_type":"usermanual", "p_code":"25", - "code":"42" + "code":"45" }, { "desc":"A gateway enables unified entry, traffic management, security, and service isolation.Gateways use load balancers of ELB to provide network access. Before adding a gateway", @@ -383,8 +410,8 @@ "title":"Adding a Gateway", "uri":"asm_01_0056.html", "doc_type":"usermanual", - "p_code":"42", - "code":"43" + "p_code":"45", + "code":"46" }, { "desc":"You can add multiple routes and configure multiple forwarding policies for a created gateway.Domain NameEnter the external domain name of the service. If this parameter i", @@ -392,8 +419,8 @@ "title":"Adding a Route", "uri":"asm_01_0057.html", "doc_type":"usermanual", - "p_code":"42", - "code":"44" + "p_code":"45", + "code":"47" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -402,7 +429,7 @@ "uri":"asm_01_0034.html", "doc_type":"usermanual", "p_code":"25", - "code":"45" + "code":"48" }, { "desc":"When switching between old and new services, you may be challenged in ensuring the system service continuity. If a new service version is directly released to all users a", @@ -410,8 +437,8 @@ "title":"Grayscale Release Overview", "uri":"asm_01_0035.html", "doc_type":"usermanual", - "p_code":"45", - "code":"46" + "p_code":"48", + "code":"49" }, { "desc":"Grayscale versionOnly one grayscale version can be released for a service. You can configure grayscale policies for the version.Only one grayscale version can be released", @@ -419,8 +446,8 @@ "title":"Creating a Grayscale Release Task", "uri":"asm_01_0036.html", "doc_type":"usermanual", - "p_code":"45", - "code":"47" + "p_code":"48", + "code":"50" }, { "desc":"Basic operations on a grayscale version are performed by modifying the configuration of the DestinationRule and VirtualService resources of Istio. After the modification ", @@ -428,8 +455,8 @@ "title":"Basic Operations on a Grayscale Task", "uri":"asm_01_0037.html", "doc_type":"usermanual", - "p_code":"45", - "code":"48" + "p_code":"48", + "code":"51" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -438,7 +465,7 @@ "uri":"asm_01_0038.html", "doc_type":"usermanual", "p_code":"25", - "code":"49" + "code":"52" }, { "desc":"Mesh configuration provides cluster management, sidecar management, Istio resource management, and upgrade capabilities.The mesh control plane workloads inject and manage", @@ -446,8 +473,8 @@ "title":"Overview", "uri":"asm_01_0039.html", "doc_type":"usermanual", - "p_code":"49", - "code":"50" + "p_code":"52", + "code":"53" }, { "desc":"On the Sidecar Management tab, you can view information about all workloads injected with sidecars, inject sidecars, and configure sidecar resource limits.You can view th", @@ -455,8 +482,8 @@ "title":"Sidecar Management", "uri":"asm_01_0041.html", "doc_type":"usermanual", - "p_code":"49", - "code":"51" + "p_code":"52", + "code":"54" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -464,8 +491,8 @@ "title":"Istio Resource Management", "uri":"asm_01_0091.html", "doc_type":"usermanual", - "p_code":"49", - "code":"52" + "p_code":"52", + "code":"55" }, { "desc":"You can modify all Istio resources (such as VirtualService and DestinationRule) of a service in YAML or JSON format on the Istio Resource Management page. You can also cr", @@ -473,8 +500,8 @@ "title":"Configuring Istio Resources Using YAML", "uri":"asm_01_0048.html", "doc_type":"usermanual", - "p_code":"52", - "code":"53" + "p_code":"55", + "code":"56" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -482,8 +509,8 @@ "title":"Upgrades", "uri":"asm_01_0082.html", "doc_type":"usermanual", - "p_code":"49", - "code":"54" + "p_code":"52", + "code":"57" }, { "desc":"Istio 1.15.7 is supported.CCE Turbo clusters v1.21, v1.23, v1.25, and v1.27 are supported.CCE clusters v1.21, v1.23, v1.25, and v1.27 are supported.Security vulnerabiliti", @@ -491,17 +518,17 @@ "title":"Features in v1.15", "uri":"asm_01_0095.html", "doc_type":"usermanual", - "p_code":"54", - "code":"55" + "p_code":"57", + "code":"58" }, { - "desc":"Istio 1.18 is supported.CCE Turbo clusters v1.25, v1.27, v1.28, v1.29, and v1.30, as well as v1.31 are supported.CCE clusters v1.25, v1.27, v1.28, v1.29, and v1.30, as we", + "desc":"Istio 1.18 is supported.CCE Turbo clusters v1.25, v1.27, v1.28, v1.29, v1.30, and v1.31, as well as v1.32 and v1.33 are supported.CCE clusters v1.25, v1.27, v1.28, v1.29,", "product_code":"asm", "title":"Features in v1.18", "uri":"asm_01_0124.html", "doc_type":"usermanual", - "p_code":"54", - "code":"56" + "p_code":"57", + "code":"59" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -510,7 +537,7 @@ "uri":"asm_01_0085.html", "doc_type":"usermanual", "p_code":"25", - "code":"57" + "code":"60" }, { "desc":"Non-intrusive traffic management is a core function of Istio. With traffic management, you only need to focus on your own service logic rather than service access managem", @@ -518,8 +545,8 @@ "title":"Overview", "uri":"asm_01_0049.html", "doc_type":"usermanual", - "p_code":"57", - "code":"58" + "p_code":"60", + "code":"61" }, { "desc":"RetryAuto retries upon service access failures improve the access quality and success rate.On the Retry tab, click Configure now. In the displayed dialog box, set the par", @@ -527,8 +554,8 @@ "title":"Configuring a Traffic Policy", "uri":"asm_01_0050.html", "doc_type":"usermanual", - "p_code":"57", - "code":"59" + "p_code":"60", + "code":"62" }, { "desc":"You can change the settings of a configured traffic policy. For example, you can change the load balancing algorithm from Round robin to Random.", @@ -536,8 +563,8 @@ "title":"Changing a Traffic Policy", "uri":"asm_01_0052.html", "doc_type":"usermanual", - "p_code":"57", - "code":"60" + "p_code":"60", + "code":"63" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -546,7 +573,7 @@ "uri":"asm_01_0087.html", "doc_type":"usermanual", "p_code":"25", - "code":"61" + "code":"64" }, { "desc":"ASM security functions include Access Authorization, Peer Authentication, JWT Authentication to ensure the reliable service communication.Access AuthorizationAccess autho", @@ -554,8 +581,8 @@ "title":"Configuring a Security Policy", "uri":"asm_01_0088.html", "doc_type":"usermanual", - "p_code":"61", - "code":"62" + "p_code":"64", + "code":"65" }, { "desc":"JWT is an authentication mode in which the server issues tokens to the client. When a user logs in to the client using the username and password, the server generates and", @@ -563,8 +590,8 @@ "title":"JWT Authentication Principles", "uri":"asm_01_0096.html", "doc_type":"usermanual", - "p_code":"61", - "code":"63" + "p_code":"64", + "code":"66" }, { "desc":"This section describes how to authenticate JWT requests on the ingress gateway using ASM to ensure that users access services through the ingress gateway with a reliable ", @@ -572,8 +599,8 @@ "title":"Authenticating JWT Requests on the Ingress Gateway Using ASM", "uri":"asm_01_0097.html", "doc_type":"usermanual", - "p_code":"61", - "code":"64" + "p_code":"64", + "code":"67" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -582,7 +609,7 @@ "uri":"asm_bp_0001.html", "doc_type":"usermanual", "p_code":"", - "code":"65" + "code":"68" }, { "desc":"ASM enables you to manage the traffic of services added into a service mesh. Sidecars are important components in ASM data plane. The upgrade of sidecars involves the re-", @@ -590,8 +617,8 @@ "title":"Upgrading Data Plane Sidecars Without Service Interruption", "uri":"asm_bestpractice_0003.html", "doc_type":"usermanual", - "p_code":"65", - "code":"66" + "p_code":"68", + "code":"69" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -599,8 +626,8 @@ "title":"Service Governance for Dubbo-based Applications", "uri":"asm_bestpractice_3001.html", "doc_type":"usermanual", - "p_code":"65", - "code":"67" + "p_code":"68", + "code":"70" }, { "desc":"Dubbo is a special protocol. The following functions must be provided:Envoy on the service mesh data plane parses protocols and manages traffic of Dubbo.The service mesh ", @@ -608,8 +635,8 @@ "title":"Introduction", "uri":"asm_bestpractice_3002.html", "doc_type":"usermanual", - "p_code":"67", - "code":"68" + "p_code":"70", + "code":"71" }, { "desc":"Problems in the existing Dubbo model (summarized from the Dubbo community version 2.7.4):In the microservice architecture, the Registry manages applications (services) in", @@ -617,8 +644,8 @@ "title":"Service Discovery Model", "uri":"asm_bestpractice_3008.html", "doc_type":"usermanual", - "p_code":"67", - "code":"69" + "p_code":"70", + "code":"72" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -626,8 +653,8 @@ "title":"SDK Adaptation Mode", "uri":"asm_bestpractice_3003.html", "doc_type":"usermanual", - "p_code":"67", - "code":"70" + "p_code":"70", + "code":"73" }, { "desc":"When the client in the SDK calls the target service by an interface, the client accesses the service name, instead of the service instance.Cases are different based on th", @@ -635,8 +662,8 @@ "title":"PASSTHROUGH Solution", "uri":"asm_bestpractice_3004.html", "doc_type":"usermanual", - "p_code":"70", - "code":"71" + "p_code":"73", + "code":"74" }, { "desc":"Use dubbo:reference to configure the referenced service provider in the service consumer of the Dubbo service. Use the url option to define the address of the point-to-po", @@ -644,8 +671,8 @@ "title":"Static Target Service", "uri":"asm_bestpractice_3005.html", "doc_type":"usermanual", - "p_code":"70", - "code":"72" + "p_code":"73", + "code":"75" }, { "desc":"You can create a CCE cluster with IPv4/IPv6 dual stack enabled and enable IPv4/IPv6 dual stack for the service mesh that the cluster is added to. IPv4/IPv6 dual stack all", @@ -653,8 +680,8 @@ "title":"How Do I Create a Service Mesh with IPv4/IPv6 Dual Stack Enabled", "uri":"asm_bestpractice_1009.html", "doc_type":"usermanual", - "p_code":"65", - "code":"73" + "p_code":"68", + "code":"76" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -663,7 +690,7 @@ "uri":"asm_faq_0001_0.html", "doc_type":"usermanual", "p_code":"", - "code":"74" + "code":"77" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -671,8 +698,8 @@ "title":"Service Mesh Cluster", "uri":"asm_faq_0029.html", "doc_type":"usermanual", - "p_code":"74", - "code":"75" + "p_code":"77", + "code":"78" }, { "desc":"After I enable a service mesh (create a service mesh) for a CCE cluster, it remains in the installing state for a long time and a message is displayed indicating that the", @@ -680,8 +707,8 @@ "title":"Why Does an Enabled Service Mesh Remain in the Installing State for a Long Time?", "uri":"asm_faq_0030.html", "doc_type":"usermanual", - "p_code":"75", - "code":"76" + "p_code":"78", + "code":"79" }, { "desc":"On the ASM console, after I uninstall a service mesh, it remains in the unready state for a long time.The Status of istio-master is Uninstallation Failed, and the followi", @@ -689,8 +716,8 @@ "title":"Why Does an Uninstalled Service Mesh Remain in the Unready State for a Long Time?", "uri":"asm_faq_0031.html", "doc_type":"usermanual", - "p_code":"75", - "code":"77" + "p_code":"78", + "code":"80" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -698,8 +725,8 @@ "title":"Mesh Management", "uri":"asm_faq_0019.html", "doc_type":"usermanual", - "p_code":"74", - "code":"78" + "p_code":"77", + "code":"81" }, { "desc":"I cannot create a service mesh for my cluster.Currently, clusters earlier than v1.21 cannot be managed by service meshes.", @@ -707,8 +734,8 @@ "title":"Why Cannot I Create a Service Mesh for My Cluster?", "uri":"asm_faq_0020.html", "doc_type":"usermanual", - "p_code":"78", - "code":"79" + "p_code":"81", + "code":"82" }, { "desc":"After Istio is uninstalled, exclusive nodes still exist.Only Istio control plane workloads will be deleted when you uninstall Istio for a cluster. Node resources will not", @@ -716,8 +743,8 @@ "title":"Why Are Exclusive Nodes Still Exist After Istio Is Uninstalled?", "uri":"asm_faq_0022.html", "doc_type":"usermanual", - "p_code":"78", - "code":"80" + "p_code":"81", + "code":"83" }, { "desc":"When injecting a sidecar to the namespace of a cluster, if the namespace injection is not enabled in the cluster, perform the following steps:If the following information", @@ -725,8 +752,8 @@ "title":"How Do I Enable Namespace Injection for a Cluster?", "uri":"asm_faq_0036.html", "doc_type":"usermanual", - "p_code":"78", - "code":"81" + "p_code":"81", + "code":"84" }, { "desc":"If sidecar injection is enabled for a namespace of a cluster, sidecars are automatically injected for the pods of all workloads in the namespace. To prevent sidecars from", @@ -734,8 +761,8 @@ "title":"How Do I Disable Sidecar Injection for Workloads?", "uri":"asm_faq_0037.html", "doc_type":"usermanual", - "p_code":"78", - "code":"82" + "p_code":"81", + "code":"85" }, { "desc":"Pods of services managed by a mesh may fail to be started and keep restarting. When the service container communicates with external systems, the traffic passes through t", @@ -743,8 +770,8 @@ "title":"What Can I Do If a Pod Cannot Be Started Due to Unready Sidecar?", "uri":"asm_faq_0039.html", "doc_type":"usermanual", - "p_code":"78", - "code":"83" + "p_code":"81", + "code":"86" }, { "desc":"There are many reasons for a canary upgrade failure. In case of a canary upgrade failure, you can use the following solutions to handle it.Failed to check custom resource", @@ -752,8 +779,8 @@ "title":"How Do I Handle a Canary Upgrade Failure?", "uri":"asm_faq_0044.html", "doc_type":"usermanual", - "p_code":"78", - "code":"84" + "p_code":"81", + "code":"87" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -761,8 +788,8 @@ "title":"Adding a Service", "uri":"asm_faq_0001.html", "doc_type":"usermanual", - "p_code":"74", - "code":"85" + "p_code":"77", + "code":"88" }, { "desc":"The possible cause is that the Gateway-related resource configurations are missing or incorrect. Do as follows to locate the fault:Log in to the Elastic Load Balance cons", @@ -770,8 +797,8 @@ "title":"What Do I Do If an Added Gateway Does Not Take Effect?", "uri":"asm_faq_0003.html", "doc_type":"usermanual", - "p_code":"85", - "code":"86" + "p_code":"88", + "code":"89" }, { "desc":"The demo application contains the productpage, details, ratings, and reviews services. All related workloads and Istio resources including DestinationRule, VirtualService", @@ -779,8 +806,8 @@ "title":"Why Does It Take a Long Time to Start the Demo Application in Experiencing Service Mesh in One Click?", "uri":"asm_faq_0004.html", "doc_type":"usermanual", - "p_code":"85", - "code":"87" + "p_code":"88", + "code":"90" }, { "desc":"The page of the deployed demo application cannot be accessed.The load balancer configured for the application does not listen to the port.Log in to the Elastic Load Balan", @@ -788,8 +815,8 @@ "title":"Why Cannot I Access the Page of the Deployed Demo Application?", "uri":"asm_faq_0005.html", "doc_type":"usermanual", - "p_code":"85", - "code":"88" + "p_code":"88", + "code":"91" }, { "desc":"During adding a route, the target service is filtered based on the corresponding gateway protocol. The filtering rules are as follows:For an HTTP gateway, select an HTTP ", @@ -797,8 +824,8 @@ "title":"Why Cannot I Select the Corresponding Service When Adding a Route?", "uri":"asm_faq_0035.html", "doc_type":"usermanual", - "p_code":"85", - "code":"89" + "p_code":"88", + "code":"92" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -806,8 +833,8 @@ "title":"Performing Grayscale Release", "uri":"asm_faq_0006.html", "doc_type":"usermanual", - "p_code":"74", - "code":"90" + "p_code":"77", + "code":"93" }, { "desc":"When I perform a grayscale release, the image used for the grayscale version cannot be changed.When performing the grayscale release on a service, you can only change the", @@ -815,8 +842,8 @@ "title":"Why Can't I Change the Image Used for the Grayscale Version When Performing a Grayscale Release?", "uri":"asm_faq_0007.html", "doc_type":"usermanual", - "p_code":"90", - "code":"91" + "p_code":"93", + "code":"94" }, { "desc":"A grayscale policy that based on request content does not take effect on some services.A grayscale policy based on request content is valid only for the entry service tha", @@ -824,8 +851,8 @@ "title":"Why Does Not a Grayscale Policy that Based on Request Content Take Effect for Some Services?", "uri":"asm_faq_0008.html", "doc_type":"usermanual", - "p_code":"90", - "code":"92" + "p_code":"93", + "code":"95" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -833,8 +860,8 @@ "title":"Monitoring Traffic", "uri":"asm_faq_0014.html", "doc_type":"usermanual", - "p_code":"74", - "code":"93" + "p_code":"77", + "code":"96" }, { "desc":"Check whether APM has been enabled for the cluster.Traffic monitoring aggregates the collected data. Please wait for a minute for the data to be displayed on the Traffic ", @@ -842,8 +869,8 @@ "title":"Why Cannot I View Traffic Monitoring Data Immediately After a Pod Is Started?", "uri":"asm_faq_0015.html", "doc_type":"usermanual", - "p_code":"93", - "code":"94" + "p_code":"96", + "code":"97" }, { "desc":"The latency statistics displayed on the Dashboard page are data of the services that have the highest latency among all the services in all the clusters of your account w", @@ -851,8 +878,8 @@ "title":"Why Are the Latency Statistics on the Dashboard Page Inaccurate?", "uri":"asm_faq_0016.html", "doc_type":"usermanual", - "p_code":"93", - "code":"95" + "p_code":"96", + "code":"98" }, { "desc":"The traffic ratio data is polled every 10 seconds, while the traffic monitoring data shows the traffic situation of the last 10 seconds.", @@ -860,8 +887,8 @@ "title":"Why Is the Traffic Ratio Inconsistent with That in the Traffic Monitoring Chart?", "uri":"asm_faq_0017.html", "doc_type":"usermanual", - "p_code":"93", - "code":"96" + "p_code":"96", + "code":"99" }, { "desc":"For performance purposes, the sampling rate of tracing is 10%. That is, 10 of your 100 requests are recorded and displayed on the page.", @@ -869,8 +896,8 @@ "title":"Why Can't I Find Certain Error Requests in Tracing?", "uri":"asm_faq_0018.html", "doc_type":"usermanual", - "p_code":"93", - "code":"97" + "p_code":"96", + "code":"100" }, { "desc":"Select a mesh, cluster, and namespace to monitor service traffic.Check whether the ICAgent collector is correctly installed in the cluster.Check whether the service has b", @@ -878,8 +905,8 @@ "title":"Why Cannot I Find My Service in the Traffic Monitoring Topology?", "uri":"asm_faq_0023.html", "doc_type":"usermanual", - "p_code":"93", - "code":"98" + "p_code":"96", + "code":"101" }, { "desc":"ASM can export traces to Jaeger or Zipkin. You can view them on the Jaeger or Zipkin UI. The following uses Zipkin as an example.The cluster and namespace where Zipkin is", @@ -887,8 +914,8 @@ "title":"How Do I Connect a Service Mesh to Jaeger or Zipkin for Viewing Traces?", "uri":"asm_faq_0049.html", "doc_type":"usermanual", - "p_code":"93", - "code":"99" + "p_code":"96", + "code":"102" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -897,6 +924,6 @@ "uri":"asm_his_0001.html", "doc_type":"usermanual", "p_code":"", - "code":"100" + "code":"103" } ] \ No newline at end of file diff --git a/docs/asm/umn/asm_01_0020.html b/docs/asm/umn/asm_01_0020.html index 50533a887..74b7e7aa6 100644 --- a/docs/asm/umn/asm_01_0020.html +++ b/docs/asm/umn/asm_01_0020.html @@ -7,9 +7,9 @@

Constraints

  • ASM depends on the domain name resolution of CoreDNS. Before creating a service mesh for a cluster, ensure that the cluster has required resources and CoreDNS is running normally.
  • The components of Istio 1.13 and 1.15 cannot run on nodes running CentOS or EulerOS 2.5. When creating a service mesh, do not specify these types of nodes as master nodes.

Procedure

  1. Log in to the ASM console.
  2. Click Create Mesh in the upper right corner.
  3. Configure the following parameters.

    • Mesh Edition

      Only service meshes of the Basic edition are supported for commercial use.

      -
    • Mesh Name

      Enter a service mesh name, which consists of 4 to 64 characters. It must start with a lowercase letter and cannot end with a hyphen (-). Only lowercase letters, digits, and hyphens (-) are allowed.

      +
    • Mesh Name

      Enter a service mesh name, which consists of 4 to 64 characters. It must start with a lowercase letter and cannot end with a hyphen (-). Only lowercase letters, digits, and hyphens (-) are allowed.

      Each name in the same account must be unique. After a service mesh is created, the name cannot be modified.

      -
    • Istio Version

      Select the Istio version supported by the service mesh.

      +
    • Istio Version

      Select the Istio version supported by the service mesh.

    • Enable IPv6

      Conditions for enabling IPv4/IPv6 dual stack for a service mesh

      - diff --git a/docs/asm/umn/asm_productdesc_0017.html b/docs/asm/umn/asm_productdesc_0017.html deleted file mode 100644 index 40ecb7dbd..000000000 --- a/docs/asm/umn/asm_productdesc_0017.html +++ /dev/null @@ -1,12 +0,0 @@ - - -

      Infographic for ASM

      -

      -

      -
      -
      -
      -
      Parent topic: Service Overview
      -
      -
      - diff --git a/docs/asm/umn/asm_productdesc_0019.html b/docs/asm/umn/asm_productdesc_0019.html new file mode 100644 index 000000000..27c2d7b8d --- /dev/null +++ b/docs/asm/umn/asm_productdesc_0019.html @@ -0,0 +1,593 @@ + + +

      Permissions

      +

      If you need to grant your enterprise personnel permission to access your ASM resources, use Identity and Access Management (IAM). IAM provides identity authentication, fine-grained permissions management, and access control. IAM helps you secure access to your cloud resources. If your cloud account does not require individual IAM users for permissions management, you can skip this section.

      +

      IAM is a free service. You only pay for the resources in your account.

      +

      With IAM, you can control access to specific cloud resources. For example, if you want some software developers in your enterprise to be able to use ASM resources but do not want them to delete service meshes or perform any other high-risk operations, you can create IAM users and grant permission to use service meshes but not permission to delete them.

      +

      IAM supports role/policy-based authorization and identity policy-based authorization.

      +

      The following table describes the differences between these two authorization models.

      + +

      Service Mesh Edition

      @@ -42,19 +42,19 @@
      • Enable IPv6 is only available in Basic service meshes based on Istio 1.18 or later.
      • IPv4/IPv6 dual stack cannot be enabled for a service mesh whose Istio version is upgraded to 1.18 or later.
      • IPv4/IPv6 dual stack cannot be disabled once it is enabled for a service mesh. IPv4/IPv6 dual stack cannot be enabled for an existing service mesh.
      -
    • Cluster

      Select the cluster from the cluster list or enter the cluster name in the upper right corner of the list to search for the cluster. You can only select the clusters whose versions are supported by the current service mesh version.

      -
    • Mesh Control Plane Node

      The control plane components of a Basic service mesh are installed in your cluster. You need to select a node for installing the control plane. If HA is required, you can select two or more nodes from different AZs.

      +
    • Cluster

      Select the cluster from the cluster list or enter the cluster name in the upper right corner of the list to search for the cluster. You can only select the clusters whose versions are supported by the current service mesh version.

      +
    • Mesh Control Plane Node

      The control plane components of a Basic service mesh are installed in your cluster. You need to select a node for installing the control plane. If HA is required, you can select two or more nodes from different AZs.

      A selected node will be labeled with istio:master, and the components will be scheduled to that node.

    • Observability Configuration
      • Tracing

        Enable Call Chain: If this option is enabled, you can use distributed tracing to track requests in the service mesh.

        - Sampling Rate: The number of requests generated by the tracing service/The total number of requests

        - Version: tracing service. If you select Third-party Jaeger/Zipkin service, you need to set Service Address and Service Port, which indicate the address and port number used by the third-party tracing service to receive requests.

        -
        • Only Istio 1.15 or later support the third-party tracing service.
        • If you want to use the third-party Jaeger or Zipkin service, install it first. Then, obtain the service address.
        • The default service ports of Jaeger and Zipkin are both 9411. If you create a custom service port during Jaeger or Zipkin installation, replace Service Port with the actual value.
        +
        • Only Istio 1.15 and later versions support third-party tracing services.
        • If you want to use the third-party Jaeger or Zipkin service, install it first. Then, obtain the service address.
        • The default service ports of Jaeger and Zipkin are both 9411. If you create a custom service port during Jaeger or Zipkin installation, replace Service Port with the actual value.
      • -

    • (Optional) Specify advanced settings.

      • Namespace Injection Settings

        Select a namespace and label it with istio-injection=enabled. After being restarted, all pods in the namespace will be automatically injected with istio-proxy sidecars.

        +

      • (Optional) Specify advanced settings.

        • Namespace Injection Settings

          Select a namespace and label it with istio-injection=enabled. After being restarted, all pods in the namespace will be automatically injected with istio-proxy sidecars.

          If you do not configure namespace injection, you can inject a sidecar on the Sidecar Management tab (Mesh Configuration > Sidecar Management) after the service mesh is created. For details, see Injecting a Sidecar.

          -
        • Restart Existing Services

          : The pods of existing services in the namespace will be restarted, which will temporarily interrupt your services. The istio-proxy sidecars can be automatically injected to the pods of existing services only after the pods are restarted.

          +
        • Restart Existing Services

          : The pods of existing services in the namespace will be restarted, which will temporarily interrupt your services. The istio-proxy sidecars can be automatically injected to the pods of existing services only after the pods are restarted.

          : The istio-proxy sidecars cannot be automatically injected into the pods of existing services. You need to manually restart the pods on the CCE console to inject the sidecars.

        • Traffic Interception Settings

          By default, sidecars intercept all inbound and outbound traffic of pods. You can modify the default traffic rules in Traffic Interception Settings.

          @@ -67,9 +67,9 @@

          Outbound IP Ranges: IP address ranges separated by commas (,) in CIDR format. You can use this field to specify the IP ranges that will be included or excluded for outbound traffic redirection.

          • Include only specified IP ranges means that the traffic from specified IP ranges will be redirected to the sidecar.
          • Exclude only specified IP ranges means that the traffic from IP ranges except the specified IP ranges will be redirected to the sidecar.
          -
        • Resource Tags

          Enter the tag key and tag value. A maximum of 20 tags can be added.

          +
        • Resource Tags

          Enter the tag key and tag value. A maximum of 20 tags can be added.

        -

      • Review the service mesh configuration in Configuration List on the right of the page and click Submit.

        It takes about 1 to 3 minutes to create a service mesh. If the service mesh status changes from Installing to Running, the service mesh is successfully created.

        +

      • Review the service mesh configuration in Configuration List on the right of the page and click Submit.

        It takes about 1 to 3 minutes to create a service mesh. If the service mesh status changes from Installing to Running, the service mesh is successfully created.

        When the service mesh is enabled, the following operations are performed:

        • Helm orchestrates the application into a Release as the resource of the service mesh control plane.
        diff --git a/docs/asm/umn/asm_01_0041.html b/docs/asm/umn/asm_01_0041.html index 96b71f5c2..397067811 100644 --- a/docs/asm/umn/asm_01_0041.html +++ b/docs/asm/umn/asm_01_0041.html @@ -5,12 +5,15 @@

        Injecting a Sidecar

        You can view the namespace and cluster that the injected sidecar belongs to. If no sidecar has been injected or you need to inject sidecars for more namespaces, perform the following operations:

        1. Log in to the ASM console and click the name of the target service mesh to go to its details page.
        2. In the navigation pane, choose Mesh Configuration. Then, click the Sidecar Management tab.
        3. Click Sidecar Management, select a namespace, determine whether enable Restart Existing Services, and click OK.

          Parameter description:

          • Namespace: Select one or more namespaces. The system adds labels for namespaces based on Istio versions.
            • istio-injection=enabled can be used in Istio 1.13.9-r3 and earlier versions, as well as Istio 1.15.5-r2 and earlier versions.
            -
            • istio.io/rev=<revision> can be used in Istio later than 1.13.9-r3, Istio later than 1.15.5-r2, and all Istio 1.18 versions.
            +
            • istio.io/rev=<revision> can be used in Istio later than 1.13.9-r3, Istio later than 1.15.5-r2, all Istio 1.18 versions, and all Istio 1.28 versions.
          • Restart Existing Services

            : Enabling Restart Existing Services will restart the pods of existing services and temporarily interrupt your services. New pods will have istio-proxy sidecars automatically injected.

            • If you select a new namespace, an automatic injection label is added. After all pods running the Deployment in that namespace are restarted, the istio-proxy sidecars will be automatically injected into new pods.
            • If you deselect a namespace, the automatic injection label is deleted. After all pods running the Deployment in that namespace are restarted, new pods do not have istio-proxy sidecars.
            • If there are pods that are not injected with sidecars in selected namespaces, all pods running the Deployment will be restarted to inject sidecars. If all pods have sidecars injected, the pods will not be restarted.
            -

            : When you do not enable Restart Existing Services, the istio-proxy sidecars cannot be automatically injected into the pods of existing services. In this case, you need to manually restart the pods on the CCE console to inject the sidecars. This parameter affects only existing services. If the namespaces are labeled with istio-injection=enabled, sidecars will be automatically injected into new pods.

            +

            : The istio-proxy sidecars cannot be automatically injected into the pods of existing services. You need to manually restart the pods on the CCE console to inject the sidecars. This parameter affects only existing services. If the namespaces are labeled with istio-injection=enabled or istio.io/rev=<revision>, sidecars will be automatically injected into new pods.

            +

            This module does not provide the function of restarting services in a specific namespace. If a namespace is not selected, the automatic injection label will be removed from the namespace. After the workload in the namespace is restarted, the istio-proxy sidecar will not be automatically injected.

            +

            To inject a sidecar into a workload in a specified namespace, ensure that the namespace is selected and enabled. Then, go to the Workloads page of the CCE cluster console, select the workload, and choose More > Redeploy. After the workload is restarted, the istio-proxy sidecar is automatically injected.

            +
          • Traffic Interception Settings

            By default, sidecars intercept all inbound and outbound traffic of pods. You can modify the default traffic rules in Traffic Interception Settings.

            Inbound Ports: Inbound ports separated by commas (,). You can use this field to specify the ports that will be included or excluded for inbound traffic redirection.

            @@ -23,7 +26,8 @@
            • Include only specified IP ranges means that the traffic from specified IP ranges will be redirected to the sidecar.
            • Exclude only specified IP ranges means that the traffic from IP ranges except the specified IP ranges will be redirected to the sidecar.
          -
          • If the system displays a message indicating that modification of namespace injection is not enabled in the following clusters, you need to run the kubectl command to enable namespace injection. For details, see How Do I Enable Namespace Injection for a Cluster?.
          • After sidecar injection is enabled for a namespace of a cluster, sidecars are automatically injected for pods of all workloads in the namespace. If you do not want to inject sidecars for some workloads, see How Do I Disable Sidecar Injection for Workloads?.
          +
          • For details about why sidecar injection failed, see .
          +
          • If ASM displays a message indicating that modification of namespace injection is not enabled in the following clusters, you need to run the kubectl command to enable namespace injection. For details, see How Do I Enable Namespace Injection for a Cluster?
          • After sidecar injection is enabled for a namespace of a cluster, sidecars are automatically injected for pods of all workloads in the namespace. If you do not want to inject sidecars for some workloads, see How Do I Disable Sidecar Injection for Workloads?

        diff --git a/docs/asm/umn/asm_01_0124.html b/docs/asm/umn/asm_01_0124.html index 99d6502b5..272f54e95 100644 --- a/docs/asm/umn/asm_01_0124.html +++ b/docs/asm/umn/asm_01_0124.html @@ -1,7 +1,7 @@

        Features in v1.18

        -
        • Istio 1.18 is supported.
        • CCE Turbo clusters v1.25, v1.27, v1.28, v1.29, and v1.30, as well as v1.31 are supported.
        • CCE clusters v1.25, v1.27, v1.28, v1.29, and v1.30, as well as v1.31 are supported.
        • Kubernetes Gateway API is supported.
        +
        • Istio 1.18 is supported.
        • CCE Turbo clusters v1.25, v1.27, v1.28, v1.29, v1.30, and v1.31, as well as v1.32 and v1.33 are supported.
        • CCE clusters v1.25, v1.27, v1.28, v1.29, v1.30, and v1.31 , as well as v1.32 and v1.33 are supported.
        • Kubernetes Gateway API is supported.

        For details, visit https://istio.io/latest/news/releases/1.18.x/.

        diff --git a/docs/asm/umn/asm_01_0141.html b/docs/asm/umn/asm_01_0141.html new file mode 100644 index 000000000..4fa1e8e18 --- /dev/null +++ b/docs/asm/umn/asm_01_0141.html @@ -0,0 +1,17 @@ + + +

        Using IAM to Grant Access to ASM

        +
        + + diff --git a/docs/asm/umn/asm_01_0145.html b/docs/asm/umn/asm_01_0145.html new file mode 100644 index 000000000..cfef7db04 --- /dev/null +++ b/docs/asm/umn/asm_01_0145.html @@ -0,0 +1,66 @@ + + +

        Using IAM Roles or Policies to Grant Access to ASM

        +

        System-defined permissions in provided by Identity and Access Management (IAM) let you control access to ASM. With IAM, you can:

        +
        • Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing ASM resources.
        • Grant users only the permissions required to perform a given task based on their job responsibilities.
        • Entrust an account or a cloud service to perform efficient O&M on your ASM resources.
        +

        If your account meets your permissions requirements, you can skip this section.

        +

        Figure 1 shows the process flow of role/policy-based authorization.

        +

        Prerequisites

        Before granting permissions to user groups, learn about system-defined permissions in for ASM. To grant permissions for other services, learn about all permissions supported by IAM.

        +
        +

        Process Flow

        Figure 1 Process of granting ASM permissions using role/policy-based authorization
        +
        1. On the IAM console, create a user group and assign permissions to it.

          Create a user group on the IAM console, and assign the ASM ReadOnlyAccess permissions to the group.

          +
        2. Create an IAM user and add it to the user group.

          On the IAM console, create a user and add it to the user group created in 1.

          +
        3. Log in as the IAM user and verify permissions.

          In the authorized region, perform the following operations:

          +
          • Choose Service List > Application Service Mesh. Click Buy Mesh on the ASM console. If a message appears indicating that you have insufficient permissions to perform the operation, the ASM ReadOnlyAccess policy is in effect.
          • Choose another service from Service List. If a message appears indicating that you have insufficient permissions to access the service, the ASM ReadOnlyAccess policy is in effect.
          +
        +
        +

        Example Custom Policies

        You can create custom policies to supplement the system-defined policies of ASM. For details about actions supported in custom policies, see .

        +

        To create a custom policy, choose either visual editor or JSON.

        +
        • Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy grammar.
        • JSON: Create a JSON policy or edit an existing one.
        +

        For details, see .

        +

        The following lists examples of common ASM custom policies.

        +
        • Example 1: Grant permissions to create service meshes.
          {
+    "Version": "1.1",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "asm:mesh:create"
+            ]
+        }
+    ]
+}
          +
        • Example 2: Grant permissions to deny service mesh deletion.

          A policy with only "Deny" permissions must be used together with other policies. If the permissions granted to an IAM user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions.

          +
          {
+    "Version": "1.1",
+    "Statement": [
+        {
+            "Effect": "Deny",
+            "Action": [
+                "asm:mesh:createGateway"
+            ]
+        }
+    ]
+}
          +
        • Example 3: Create a custom policy containing multiple actions.

          A custom policy can contain the actions of one or multiple services that are of the same type (global or project-level). Example policy containing actions of multiple services:

          +
          {
+    "Version": "1.1",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "cce:cluster:create"
+                "asm:mesh:create"
+            ]
+        }
+    ]
+}
          +
        +
        +
        +
        +
        +
        Parent topic: Using IAM to Grant Access to ASM
        +
        +
        + diff --git a/docs/asm/umn/asm_01_0146.html b/docs/asm/umn/asm_01_0146.html new file mode 100644 index 000000000..2248ddeec --- /dev/null +++ b/docs/asm/umn/asm_01_0146.html @@ -0,0 +1,70 @@ + + +

        Using IAM Identity Policies to Grant Access to ASM

        +

        System-defined permissions in provided by Identity and Access Management (IAM) let you control access to ASM. With IAM, you can:

        +
        • Create IAM users or user groups for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing ASM resources.
        • Grant users only the permissions required to perform a given task based on their job responsibilities.
        • Entrust an account or a cloud service to perform efficient O&M on your ASM resources.
        +

        If your account meets your permissions requirements, you can skip this section.

        +

        Figure 1 shows the process flow of identity policy-based authorization.

        +

        Prerequisites

        Before granting permissions, learn about system-defined permissions in . To grant permissions for other services, learn about all permissions supported by IAM.

        +
        +

        Process Flow

        Figure 1 Process of granting ASM permissions using identity policy-based authorization
        +
        1. On the IAM console, .

          Create a user or user group on the IAM console.

          +
        2. (ASMReadOnlyPolicy as an example) to the user or user group.
        3. Log in as the IAM user and verify permissions.

          In the authorized region, perform the following operations:

          +
          • Choose Service List > Application Service Mesh. Click Buy Mesh on the ASM console. If a message appears indicating that you have insufficient permissions to perform the operation, ASMReadOnlyPolicy is in effect.
          • Choose another service from Service List. If a message appears indicating that you have insufficient permissions to access the service, ASMReadOnlyPolicy is in effect.
          +
        +
        +

        Example Custom Identity Policies

        You can create custom identity policies to supplement the system-defined identity policies of ASM. For details about actions supported in custom identity policies, see .

        +

        To create a custom identity policy, choose either visual editor or JSON.

        +
        • Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy grammar.
        • JSON: Create a JSON policy or edit an existing one.
        +

        For details, see .

        +

        When creating a custom identity policy, use the Resource element to specify the resources the identity policy applies to and use the Condition element (service-specific condition keys) to control when the identity policy is in effect. For details about the supported resource types and condition keys, see .

        +

        The following provides examples of custom ASM identity policies.

        +
        • Example 1: Grant permissions to create service meshes.
          {
+    "Version": "5.0",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "asm:mesh:create",
+                "asm:mesh:createGateway"
+            ]
+        }
+    ]
+}
          +
        • Example 2: Create a custom identity policy containing multiple actions.

          +

          A custom identity policy can contain the actions of one or more services. Example identity policy containing multiple actions:

          +
          {
+    "Version": "5.0",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "asm:mesh:create",
+                "asm:mesh:createGateway"
+            ]
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "evs:volumes:create",
+                "evs:volumes:list"
+            ]
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "ecs:cloudServers:createServers",
+                "ecs:cloudServers:listServersDetails"
+            ]
+        }
+    ]
+}
          +
        +
        +
        +
        +
        +
        Parent topic: Using IAM to Grant Access to ASM
        +
        +
        + diff --git a/docs/asm/umn/asm_pd_0001.html b/docs/asm/umn/asm_pd_0001.html index bb9e89466..d334051ec 100644 --- a/docs/asm/umn/asm_pd_0001.html +++ b/docs/asm/umn/asm_pd_0001.html @@ -4,8 +4,6 @@

      • 1.18

      v1.25, v1.27, v1.28, v1.29, v1.30, or v1.31

      +

      v1.25, v1.27, v1.28, v1.29, v1.30, v1.31, v1.32, or v1.33
      + + + + + + + + + + + + + + + + + + + +
      Table 1 Differences between role/policy-based and identity policy-based authorization

      Authorization Model

      +

      Core Relationship

      +

      Permissions

      +

      Authorization Method

      +

      Scenario

      +

      Role/Policy

      +

      User-permission-authorization scope

      +
      • System-defined roles
      • System-defined policies
      • Custom policies
      +

      Assigning roles or policies to principals

      +

      To authorize a user, you need to add it to a user group first and then specify the scope of authorization. It provides a limited number of condition keys and cannot meet the requirements of fine-grained permissions control. This method is suitable for small- and medium-sized enterprises.

      +

      Identity policy

      +

      User-policy

      +
      • System-defined identity policies
      • Custom identity policies
      +
      • Assigning identity policies to principals
      • Attaching identity policies to principals
      +

      You can authorize a user by attaching an identity policy to it. User-specific authorization and a variety of key conditions allow for more fine-grained permissions control. However, this model can be hard to set up. It requires a certain amount of expertise and is suitable for medium- and large-sized enterprises.

      +
      +
      +

      Policies/identity policies and actions in the two authorization models are not interoperable. You are advised to use the identity policy-based authorization model. For details about system-defined permissions, see Role/Policy-based Authorization and Identity Policy-based Authorization.

      +

      For more information about IAM, see IAM Service Overview.

      +

      Role/Policy-based Authorization

      ASM supports role/policy-based authorization. New IAM users do not have any permissions assigned by default. You need to first add them to one or more groups and then attach policies or roles to these groups. The users then inherit permissions from the groups and can perform specified operations on cloud services based on the permissions they have been assigned.

      +

      ASM is a project-level service deployed for specific regions. When you set Scope to Region-specific projects and select the specified projects in the specified regions , the users only have permissions for service meshes in the selected projects. If you set Scope to All resources, the users have permissions for service meshes in all region-specific projects. When accessing ASM, the users need to switch to the authorized region.

      +

      Table 2 lists all the system-defined permissions for ASM. System-defined policies in role/policy-based authorization are not interoperable with those in identity policy-based authorization.

      + +
      + + + + + + + + + + + + + + + + +
      Table 2 System-defined permissions for ASM

      Role/Policy Name

      +

      Description

      +

      Type

      +

      Dependencies

      +

      ASM FullAccess

      +

      Administrator permissions for ASM. Users with these permissions can perform all operations on service meshes and all resources (such as Services, gateways, and grayscale release tasks) in the service meshes.

      +

      System-defined policy

      +

      None

      +

      ASM ReadOnlyAccess

      +

      Read-only permissions for ASM. Users with these permissions can only view service meshes and all resources in the service meshes.

      +

      System-defined policy

      +

      None

      +
      +
      +

      Table 3 lists the common operations supported by system-defined permissions for ASM.

      + +
      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
      Table 3 Common operations supported by system-defined permissions

      Operation

      +

      ASM FullAccess

      +

      ASM ReadOnlyAccess

      +

      Creating a service mesh

      +

      √

      +

      x

      +

      Deleting a service mesh

      +

      √

      +

      x

      +

      Querying the service mesh list

      +

      √

      +

      √

      +

      Querying the details about a service mesh

      +

      √

      +

      √

      +

      Updating a service mesh

      +

      √

      +

      x

      +

      Upgrading a service mesh

      +

      √

      +

      x

      +

      Querying and validating the Service of a service mesh

      +

      √

      +

      √

      +

      Querying the Service list of a service mesh

      +

      √

      +

      √

      +

      Repairing the Service of a service mesh with just one click

      +

      √

      +

      x

      +

      Creating a service governance policy for a service mesh

      +

      √

      +

      x

      +

      Querying the service governance policy of a service mesh

      +

      √

      +

      √

      +

      Deleting the service governance policy of a service mesh

      +

      √

      +

      x

      +

      Obtaining the namespace list

      +

      √

      +

      √

      +

      Injecting sidecars for a namespace

      +

      √

      +

      x

      +

      Creating a grayscale release task

      +

      √

      +

      x

      +

      Deleting a grayscale release task

      +

      √

      +

      x

      +

      Querying the grayscale release task list

      +

      √

      +

      √

      +

      Querying the details about a grayscale release task

      +

      √

      +

      √

      +

      Updating a grayscale release task

      +

      √

      +

      x

      +

      Creating a gateway

      +

      √

      +

      x

      +

      Querying the gateway list

      +

      √

      +

      √

      +

      Deleting a gateway

      +

      √

      +

      x

      +

      Adding a gateway route

      +

      √

      +

      x

      +

      Querying the gateway route list

      +

      √

      +

      √

      +

      Deleting a gateway route

      +

      √

      +

      x

      +

      Creating a one-click experience task

      +

      √

      +

      x

      +

      Querying the details about a one-click experience task

      +

      √

      +

      √

      +

      Deleting a one-click experience task

      +

      √

      +

      x

      +

      Querying the service mesh topology

      +

      √

      +

      √

      +
      +
      +
      +

      Role/Policy Dependencies of the ASM Console

      +
      + + + + + + + + + +
      Table 4 Role/Policy dependencies of the ASM console

      Console Function

      +

      Dependency

      +

      Role/Policy Required

      +

      Tracing

      +

      APM

      +
      • To enable the tracing service provided by APM 2.0, an IAM user must be granted the APMFullAccess permissions.
      +
      +
      +
      +

      Identity Policy-based Authorization

      ASM supports identity policy-based authorization. Table 5 lists all the system-defined identity policies for ASM. System-defined policies in identity policy-based authorization are not interoperable with those in role/policy-based authorization.

      + +
      + + + + + + + + + + + + + +
      Table 5 System-defined identity policies for ASM

      Identity Policy Name

      +

      Description

      +

      Type

      +

      ASMFullAccess

      +

      Administrator permissions for ASM. Users with these permissions can perform all operations on service meshes and all resources (such as Services, gateways, and grayscale release tasks) in the service meshes.

      +

      System-defined identity policy

      +

      ASMReadOnlyAccess

      +

      Read-only permissions for ASM. Users with these permissions can only view service meshes and all resources in the service meshes.

      +

      System-defined identity policy

      +
      +
      +

      Table 6 lists the common operations supported by system-defined identity policies for ASM.

      + +
      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
      Table 6 Common operations supported by system-defined policies

      Operation

      +

      ASM FullAccess

      +

      ASM ReadOnlyAccess

      +

      Creating a service mesh

      +

      √

      +

      x

      +

      Deleting a service mesh

      +

      √

      +

      x

      +

      Querying the service mesh list

      +

      √

      +

      √

      +

      Querying the details about a service mesh

      +

      √

      +

      √

      +

      Updating a service mesh

      +

      √

      +

      x

      +

      Upgrading a service mesh

      +

      √

      +

      x

      +

      Querying and validating the Service of a service mesh

      +

      √

      +

      √

      +

      Querying the Service list of a service mesh

      +

      √

      +

      √

      +

      Repairing the Service of a service mesh with just one click

      +

      √

      +

      x

      +

      Creating a service governance policy for a service mesh

      +

      √

      +

      x

      +

      Querying the service governance policy of a service mesh

      +

      √

      +

      √

      +

      Deleting the service governance policy of a service mesh

      +

      √

      +

      x

      +

      Obtaining the namespace list

      +

      √

      +

      √

      +

      Injecting sidecars for a namespace

      +

      √

      +

      x

      +

      Creating a grayscale release task

      +

      √

      +

      x

      +

      Deleting a grayscale release task

      +

      √

      +

      x

      +

      Querying the grayscale release task list

      +

      √

      +

      √

      +

      Querying the details about a grayscale release task

      +

      √

      +

      √

      +

      Updating a grayscale release task

      +

      √

      +

      x

      +

      Creating a gateway

      +

      √

      +

      x

      +

      Querying the gateway list

      +

      √

      +

      √

      +

      Deleting a gateway

      +

      √

      +

      x

      +

      Adding a gateway route

      +

      √

      +

      x

      +

      Querying the gateway route list

      +

      √

      +

      √

      +

      Deleting a gateway route

      +

      √

      +

      x

      +

      Creating a one-click experience task

      +

      √

      +

      x

      +

      Querying the details about a one-click experience task

      +

      √

      +

      √

      +

      Deleting a one-click experience task

      +

      √

      +

      x

      +

      Querying the service mesh topology

      +

      √

      +

      √

      +
      +
      +
      +

      Identity Policy Dependencies of the ASM Console

      +
      + + + + + + + + + +
      Table 7 Identity policy dependencies of the ASM console

      Console Function

      +

      Dependency

      +

      Identity Policy Required

      +

      Tracing

      +

      APM

      +

      To enable the tracing service provided by APM 2.0, an IAM user must be granted the APMFullAccess permissions.

      +
      +
      +
      +

      Helpful Links

      +
      +
+
+
+
Parent topic: Service Overview
+
+
+ diff --git a/docs/asm/umn/asm_qs_0002.html b/docs/asm/umn/asm_qs_0002.html index 08d47a917..d5c092153 100644 --- a/docs/asm/umn/asm_qs_0002.html +++ b/docs/asm/umn/asm_qs_0002.html @@ -1,6 +1,6 @@ -

Enabling Istio for a Cluster

+

Enabling Istio for a Cluster

    diff --git a/docs/asm/umn/en-us_image_0000002043652974.png b/docs/asm/umn/en-us_image_0000002043652974.png deleted file mode 100644 index 401dbd6f9..000000000 Binary files a/docs/asm/umn/en-us_image_0000002043652974.png and /dev/null differ diff --git a/docs/asm/umn/en-us_image_0000002526896489.png b/docs/asm/umn/en-us_image_0000002526896489.png new file mode 100644 index 000000000..f91550a23 Binary files /dev/null and b/docs/asm/umn/en-us_image_0000002526896489.png differ diff --git a/docs/asm/umn/en-us_image_0000002526896571.png b/docs/asm/umn/en-us_image_0000002526896571.png new file mode 100644 index 000000000..ab53fd4f3 Binary files /dev/null and b/docs/asm/umn/en-us_image_0000002526896571.png differ diff --git a/docs/asm/umn/en-us_topic_0000001627845328.html b/docs/asm/umn/en-us_topic_0000001627845328.html index b11460e8b..b337a8c65 100644 --- a/docs/asm/umn/en-us_topic_0000001627845328.html +++ b/docs/asm/umn/en-us_topic_0000001627845328.html @@ -10,6 +10,8 @@