Kubernetes实战总结 - 服务网格istio

Istio 是什么？

Istio是一个用于服务治理的开放平台

Istio是一个Service Mesh形态的用于服务治理的开放平台

Istio是一个与Kubernetes紧密结合的适用于云原生场景的Service Mesh形态的用于服务治理的开放平台

 

 

Istio部署记录！

[root@k8s-32 istio-1.6.0]# istioctl manifest apply --set profile=demo
Detected that your cluster does not support third party JWT authentication. Falling back to less secure first party JWT. See https://istio.io/docs/ops/best-practices/security/#configure-third-party-service-account-tokens for details.
✔ Istio core installed
✔ Istiod installed
✔ Ingress gateways installed
✔ Egress gateways installed
✔ Addons installed
✔ Installation complete                                                                                                                                                                                                                      [root@k8s-32 istio-1.6.0]#
[root@k8s-32 istio-1.6.0]# kubectl -n istio-system get pod
NAME                                    READY   STATUS    RESTARTS   AGE
grafana-74dc798895-r9w4k                1/1     Running   0          3m24s
istio-egressgateway-69bf865cf8-dqmbm    1/1     Running   0          3m25s
istio-ingressgateway-569d44555d-7r6qf   1/1     Running   0          3m25s
istio-tracing-8584b4d7f9-zmcrs          1/1     Running   0          3m24s
istiod-84cc4dfcd8-cr9vs                 1/1     Running   0          3m50s
kiali-6f457f5964-7b6h4                  1/1     Running   0          3m24s
prometheus-79878ff5fd-ktlpf             2/2     Running   0          3m24s
[root@k8s-32 istio-1.6.0]# kubectl -n istio-system get svc
NAME                        TYPE           CLUSTER-IP      EXTERNAL-IP   PORT(S)                                                                      AGE
grafana                     ClusterIP      10.96.184.105           3000/TCP                                                                     23m
istio-egressgateway         ClusterIP      10.103.86.9             80/TCP,443/TCP,15443/TCP                                                     23m
istio-ingressgateway        LoadBalancer   10.104.28.37         15020:32340/TCP,80:32254/TCP,443:32115/TCP,31400:32616/TCP,15443:32470/TCP   23m
istiod                      ClusterIP      10.105.190.0            15010/TCP,15012/TCP,443/TCP,15014/TCP,53/UDP,853/TCP                         24m
jaeger-agent                ClusterIP      None                    5775/UDP,6831/UDP,6832/UDP                                                   23m
jaeger-collector            ClusterIP      10.108.128.31           14267/TCP,14268/TCP,14250/TCP                                                23m
jaeger-collector-headless   ClusterIP      None                    14250/TCP                                                                    23m
jaeger-query                ClusterIP      10.104.174.30           16686/TCP                                                                    23m
kiali                       ClusterIP      10.101.20.142           20001/TCP                                                                    23m
prometheus                  ClusterIP      10.99.39.72             9090/TCP                                                                     23m
tracing                     ClusterIP      10.99.205.57            80/TCP                                                                       23m
zipkin                      ClusterIP      10.106.72.65            9411/TCP                                                                     23m

[root@k8s-32 istio-1.6.0]# kubectl -n istio-system edit svc istio-ingressgateway
service/istio-ingressgateway edited

[root@k8s-32 istio-1.6.0]# kubectl -n istio-system get svc
NAME                        TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                                                                      AGE
grafana                     ClusterIP   10.96.184.105           3000/TCP                                                                     25m
istio-egressgateway         ClusterIP   10.103.86.9             80/TCP,443/TCP,15443/TCP                                                     25m
istio-ingressgateway        NodePort    10.104.28.37            15020:32340/TCP,80:32254/TCP,443:32115/TCP,31400:32616/TCP,15443:32470/TCP   25m
istiod                      ClusterIP   10.105.190.0            15010/TCP,15012/TCP,443/TCP,15014/TCP,53/UDP,853/TCP                         25m
jaeger-agent                ClusterIP   None                    5775/UDP,6831/UDP,6832/UDP                                                   25m
jaeger-collector            ClusterIP   10.108.128.31           14267/TCP,14268/TCP,14250/TCP                                                25m
jaeger-collector-headless   ClusterIP   None                    14250/TCP                                                                    25m
jaeger-query                ClusterIP   10.104.174.30           16686/TCP                                                                    24m
kiali                       ClusterIP   10.101.20.142           20001/TCP                                                                    24m
prometheus                  ClusterIP   10.99.39.72             9090/TCP                                                                     24m
tracing                     ClusterIP   10.99.205.57            80/TCP                                                                       24m
zipkin                      ClusterIP   10.106.72.65            9411/TCP                                                                     24m

[root@k8s-32 istio-1.6.0]# kubectl label namespace default istio-injection=enabled
error: 'istio-injection' already has a value (enabled), and --overwrite is false

[root@k8s-32 istio-1.6.0]# kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml
service/details created
serviceaccount/bookinfo-details created
deployment.apps/details-v1 created
service/ratings created
serviceaccount/bookinfo-ratings created
deployment.apps/ratings-v1 created
service/reviews created
serviceaccount/bookinfo-reviews created
deployment.apps/reviews-v1 created
deployment.apps/reviews-v2 created
deployment.apps/reviews-v3 created
service/productpage created
serviceaccount/bookinfo-productpage created
deployment.apps/productpage-v1 created

[root@k8s-32 istio-1.6.0]# kubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yaml
gateway.networking.istio.io/bookinfo-gateway created
virtualservice.networking.istio.io/bookinfo created

[root@k8s-32 istio-1.6.0]# kubectl apply -f samples/bookinfo/networking/destination-rule-all.yaml
destinationrule.networking.istio.io/productpage created
destinationrule.networking.istio.io/reviews created
destinationrule.networking.istio.io/ratings created
destinationrule.networking.istio.io/details created

[root@k8s-32 istio-1.6.0]# kubectl get pod
NAME                              READY   STATUS     RESTARTS   AGE
details-v1-78d78fbddf-jxx2h       0/2     Init:0/1   0          9s
productpage-v1-85b9bf9cd7-kh5wg   0/2     Init:0/1   0          7s
ratings-v1-6c9dbf6b45-ccdcg       0/2     Init:0/1   0          8s
reviews-v1-564b97f875-5j5x5       0/2     Init:0/1   0          8s
reviews-v2-568c7c9d8f-vg52z       0/2     Init:0/1   0          8s
reviews-v3-67b4988599-fsjnb       0/2     Init:0/1   0          8s
[root@k8s-32 istio-1.6.0]# kubectl get pod
NAME                              READY   STATUS    RESTARTS   AGE
details-v1-78d78fbddf-jxx2h       2/2     Running   0          2m53s
productpage-v1-85b9bf9cd7-kh5wg   2/2     Running   0          2m51s
ratings-v1-6c9dbf6b45-ccdcg       2/2     Running   0          2m52s
reviews-v1-564b97f875-5j5x5       2/2     Running   0          2m52s
reviews-v2-568c7c9d8f-vg52z       2/2     Running   0          2m52s
reviews-v3-67b4988599-fsjnb       2/2     Running   0          2m52s