一篇学习istio安装部署的文章

简介Istio是servicemesh控制面的实现标准，需要先部署。不过这里会有一个坑要注意，不然页面无法访问。这个坑是examplebug，已经作为issue提出来了，我也被坑了。一、准备工作1、通过命令行安装Docker或者直接下载。由于网络原因，我直接下载安装。下载地址：https://hub.docker.com/editions/community/docker-ce-desktop-mac2。驱动安装curl-LOhttps://storage.googleapis.com/minikube/releases/latest/docker-machine-driver-hyperkitchmod+xdocker-machine-driver-hyperkitsudomvdocker-machine-driver-hyperkit/usr/local/bin/sudochownroot:wheel/usr/local/bin/docker-machine-driver-hyperkitsudochmodu+s/usr/local/bin/docker-machine-driver-hyperkit3.安装minikubecurl-Lominikubehttps://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64&&chmod+xminikube&&sudomvminikube/usr/local/bin/验证版本$minikubeversionminikubeversion:v1.22.04.startminikube$minikubestart😄minikubev1.22.0onDarwin10.15.7?根据现有配置文件使用docker驱动#128077;Startingcontrolplanenodeminikubeiinclusterminikube🚜Pullingbaseimage...🏃Updatingtherunningdocker"minikube"container...?Thiscontainerishavingtroubleaccessinghttps://k8s.gcr.io💡Topullnewexternalimages，你可能需要配置一个代理：https://minikube.sigs.k8s.io/docs/reference/networking/proxy/🐳PreparingKubernetesv1.21.2inDocker20.10.7...🔎VerifyingKubernetescomponents...Usingimagegcr.io/k8s-minikube/storage-provisioner:v5🌟Enabledaddons:storage-provisioner,default-storageclass🏄Done!kubectlisnowconfiguredtouse"minikube"clusterand"default"namespacebydefault2.安装部署1.下载istio或下载安装包直接，最新版本是1.11.0https://github.com/istio/istio/releases/tag/1.11.02。设置环境变量vim~/.bash_profileexportPATH=$PATH:/Users/yongliang/istio/istio-1.11。0/binsource~/.bash_profile3.安装istio$istioctlinstall--setprofile=demo-y?Istiocoreinstalled?Istiodinstalled?Egressgatewaysinstalled?Ingressgatewaysinstalled?Installationcomplete4.创建istio命名空间kubectlcreatenamespaceistio-system5.设置自动注入envoy$kubectllabelnamespacedefaultenableistiodname.验证istio版本$istioctlversionclientversion:1.11.0controlplaneversion:1.11.0dataplaneversion:1.11.0(8proxies)摘要：输出显示安装的istio客户端版本、控制面板版本和数据平面版本三、部署示例程序1、部署示例在安装目录示例目录-rw-r--r--@1yongliangstaff1134881300:17LICENSE-rw-r--r--@1yongliangstaff586681300:17README.mddrwxr-x---@3yongliangstaff9681300:17bin-rw-r-----@1yongliangstaff85481300:17manifest.yamldrwxr-xr-x@5yongliangstaff16081300:17manifestsdrwxr-xr-x@21yongliangstaff67281300:17samplesdrwxr-xr-x@5yongliangstaff16081300:17tools$kubectlapply-fsamples/bookinfo/平台/kube/bookinfo.yamlservice/detailscreatedserviceaccount/bookinfo-detailscreateddeployment.apps/details-v1createdservice/ratingscreatedserviceaccount/bookinfo-ratingscreateddeployment.apps/ratings-v1createdservice/reviewscreatedserviceaccount/bookinfo-reviewscreateddeployment.apps/reviews-v1createdservice.apps/ratingscreatedapps/appsdeployment.ratings-v1createdservice/reviewscreatedserviceaccount/bookinfo-reviewscreateddeployment.apps/reviews-v1createdservice.apps/reviewscreateddeployment.apps/reviewscreateddeployment.apps/reviews-v1oycreateddeployment/reviews-v3createdservice/productpagecreatedserviceaccount/bookinfo-productpagecreateddeployment.apps/productpage-v1created2。服务启动$kubectlgetservicesNAMETYPECLUSTER-IPEXTERNAL-IPPORT(S)AGedetailsClusterIP10.100.65.419080/TCP4d2hkubernetesClusterIP10.96.0.1443/TCP4d4hproductpageClusterIP10.107.21.1449080/TCP4d2hratingsClusterIP10.110.139.1879080/TCP4d2hreviewsClusterIP10.106.238.1309080/TCP4d2hpods为Running状态$kubectlgetpodsNAMEREADYSTATUSRESTARTSAGEdetails-v1-79f774bdb9-bkrbp2/2Running44d2hproductpage-v1-6b746f74dc-??2c55l2/2Running44d2hratings-v1-b6994bb9-7nvs22/2Running44d2hreviews-v1-545db77b95-mffvg2/2Running44d2hreviews-v2-7bf8c9648f-pmqw82/2Running44d2hreviews-v3-84779c7bbc-sztp82/2Running44d2h3.把应用关联转到istio网关$kubectlapply-fsamples/bookinfo/networking/bookinfo-gateway.yamlgateway.networking.istio.io/bookinfo-gatewaycreatedvirtualservice.networking.istio.io/bookinfocreated4。分析istio配置信息$istioctlanalyze?Novalidationissuesfoundwhenanalyzingnamespace:default.5.设置InboundIP和Port端口设置$exportINGRESS_PORT=$(kubectl-nistio-systemgetserviceistio-ingressgateway-ojsonpath='{.spec.ports[?(@.name==》http2").nodePort}')$exportSECURE_INGRESS_PORT=$(kubectl-nistio-systemgetserviceistio-ingressgateway-ojsonpath='{.spec.ports[?(@.name="https")].nodePort}')打印出来看$echo"$INGRESS_PORT"31688$echo"$SECURE_INGRESS_PORT"31908设置入站IP是官方命令中的下面一段：$exportINGRESS_HOST=$(minikubeip)$minikubeip192.168.49.2注意：跟着执行后发现最后访问不了，下面有更正启动minikube隧道$minikubetunnel?Theserviceistio-ingressgatewayrequiresprivilegedportstobeexposed:[80443]🔑sudopermissionwillbeaskedforit.🏃Startingtunnelforserviceistio-ingressgateway.修正网关地址官方为命令：$exportGATEWAY_URL=$INGRESS_HOST:$INGRESS_PORT需要修正为：$exportGATEWAY_URL=127.0.0.1$echo"$GATEWAY_URL"127.0.0.1Remarks:Pleaserefertotheissueaddresshttps://github.com/istio/istio.io/issues/93406forthereasonofcorrection.Browseraccesspage7.InstallKialidashboard$kubectlapply-fsamples/addons$kubectlrolloutstatusdeployment/kiali-nistio-systemdeployment"kiali"successfullyrolledoutstartupdashboard$istioctldashboardkialihttp://localhost:20001/kialiRemarks:Whenvisitinghttp://127.0.0.1/productpage,thetrafficcanbeobservedinthedashboardRelationshipbetweenflowdirectionandservice.