Search for resources-Enterprise Distributed Application Service(EDAS)-阿里云帮助中心

Enterprise Distributed Application Service (EDAS) provides a resource search feature that lets you quickly find and access resources by known information such as resource IDs and names.

Background information

EDAS resources are organized into microservices namespaces, clusters, and applications, each containing sub-resources or properties. You may need to locate a parent resource from a sub-resource or property, such as finding an application by a pod IP address or an ECS cluster by an ECS instance. The resource search feature simplifies this reverse lookup.

You can search for the following resources:

A namespace for microservices.
Clusters, including ECS clusters, Container Service for Kubernetes (ACK) clusters, and ACK serverless clusters
Applications, including applications deployed in ECS clusters, ACK clusters, and ACK serverless clusters

Limits

You must have search permissions to search for resources. For more information, see Access control for search.

Access control for search

The resource search feature covers microservices namespaces, clusters, and applications in EDAS. To protect data security, configure search permissions for your account.

Note

The root account does not require authorization.

Log on to the EDAS console and switch the authorization mode to RAM authorization. For more information, see Step 4: Switch the authorization to RAM authorization in the EDAS console.
In the navigation pane on the left, choose System Administration > Permission Assistant.
On the Permission Assistant page, click Create Policy.
In the Create Policy wizard, on the Create Custom Policy tab, set Policy Name and Remarks.
Add permission statements.
Note
- A policy can contain multiple statements. If a permission is set to Allow in one statement and Deny in another, the deny rule takes precedence.
- Each new statement can have only one effect: Allow or Deny.
1. On the Create Custom Policy tab, click Add Statement. In the Add Authorization Statement panel, add a statement for the authorization policy.
  EDAS uses a separate permission to control whether a RAM user can search for resources and view the search results. For example, to view application resources in the search results, the RAM user needs view permissions for that application. You can set three types of resource permissions for a RAM user: microservices namespace, cluster, and application.
  
  The following example uses a microservices namespace named test to show how to view clusters and manage applications in the namespace.
  1. For Effect, select Allow.
  2. In the left-side permission list, under Operations and Resources, choose Resource Search > Resource Search.
  3. In the Operations and Resources section, choose Namespace > View Namespace from the permission list on the left. In the resource list on the right, select China (Beijing) and test.
    
    This allows the RAM user to view the microservices namespace named test. You can grant this permission as needed.
  4. In the Operations and Resources section, from the permission list on the left, choose Cluster > View Cluster. From the resource list on the right, select China (Beijing), test, and All Clusters.
    
    This allows the RAM user to view all clusters in the microservices namespace named test. You can grant permissions for specific clusters as needed.
  5. In the Operations and Resources section, select Application from the permission list on the left. This selects all permissions under Application. In the resource list on the right, select China (Beijing) and test.
    
    This grants the RAM user permission to view all applications in the microservices namespace named test. You can grant permissions for specific applications as needed.
On the Preview Policy tab, follow the on-screen instructions to create a custom policy in the Resource Access Management (RAM) console and attach it to the corresponding RAM user. After you create the policy, preview the permissions and click Complete. For more information, see Step 3: Create a RAM user and grant permissions.

The message Policy granted successfully appears. Click Back to List to return to the Permission Assistant page and view your new access policy template.

Search for a resource

Log on to the EDAS consoleEDAS console.
In the navigation pane on the left, click Resource Search (Ctrl+F). In the search box that appears, enter a keyword to find the resource.
To narrow down results, you can search by attribute prefix. The following prefixes are supported:
- id: The unique identifier of the resource.
- name: The name of the resource.
- ip: The IP address of the resource.
- tag: The tag of the resource.
The search box also supports the following help commands:
- help: Provides help information.
- info: Provides information about the current user.
Note
On any page in the EDAS console, you can press Ctrl+F to open the resource search box.
In the search results, click a resource ID to go to the details page for that resource.