3月20日,Istio 1.1版本正式發(fā)布,我們已在《全方位解讀 | Istio v1.1正式發(fā)布》一文中為大家進(jìn)行了簡(jiǎn)單介紹。本文將給大家?guī)?lái)詳細(xì)的部署過(guò)程詳解,需要說(shuō)明的是,本文針對(duì)單集群安裝部署,多集群安裝部署會(huì)在后續(xù)文章中詳細(xì)說(shuō)明。
創(chuàng)新互聯(lián)公司長(zhǎng)期為成百上千家客戶(hù)提供的網(wǎng)站建設(shè)服務(wù),團(tuán)隊(duì)從業(yè)經(jīng)驗(yàn)10年,關(guān)注不同地域、不同群體,并針對(duì)不同對(duì)象提供差異化的產(chǎn)品和服務(wù);打造開(kāi)放共贏平臺(tái),與合作伙伴共同營(yíng)造健康的互聯(lián)網(wǎng)生態(tài)環(huán)境。為伊通企業(yè)提供專(zhuān)業(yè)的成都做網(wǎng)站、成都網(wǎng)站制作、成都外貿(mào)網(wǎng)站建設(shè),伊通網(wǎng)站改版等技術(shù)服務(wù)。擁有10多年豐富建站經(jīng)驗(yàn)和眾多成功案例,為您定制開(kāi)發(fā)。下載istio 1.1版本
[root@vm157 ~]# wget https://github.com/istio/istio/releases/download/1.1.1/istio-1.1.1-linux.tar.gz
……
2019-03-26 09:39:06 (483 KB/s) - ‘istio-1.1.1-linux.tar.gz’ saved [15736205/15736205]
Istio安裝有多種方式,本文根據(jù)helm template生成istio部署的配置文件,其他部署方式請(qǐng)參考官方文檔。
[root@vm157 ~]# cd istio-1.1.1/
[root@ruffy istio-1.1.1]# helm template ../install/kubernetes/helm/istio-init --name istio-init --namespace istio-system > istio-init.yaml
[root@ruffy istio-1.1.1]# kubectl get crds | grep 'istio.io\|certmanager.k8s.io' | wc -l
[root@ruffy istio-1.1.1]# InternalIp=10.20.1.175
[root@ruffy istio-1.1.1]# helm template install/kubernetes/helm/istio --namespace istio-system \
> --set global.mtls.enabled=true \
> --set global.controlPlaneSecurityEnabled=true \
> --set gateways.istio-ingressgateway.type=NodePort \
> --set grafana.enabled=true \
> --set servicegraph.enabled=true \
> --set servicegraph.ingress.enabled=true \
> --set servicegraph.ingress.hosts={servicegraph-istio-system.${InternalIp}.nip.io} \
> --set tracing.enabled=true \
> --set tracing.jaeger.ingress.enabled=true \
> --set tracing.jaeger.ingress.hosts={jaeger-query-istio-system.${InternalIp}.nip.io} \
> --set tracing.ingress.enabled=true \
> --set tracing.ingress.hosts={tracing-istio-system.${InternalIp}.nip.io} \
> --set kiali.enabled=true \
> --set kiali.ingress.enabled=true \
> --set kiali.ingress.hosts={kiali-istio-system.${InternalIp}.nip.io} \
> --set kiali.dashboard.grafanaURL=http://grafana-istio-system.${InternalIp}.nip.io \
> --set kiali.dashboard.jaegerURL=http://jaeger-query-istio-system.${InternalIp}.nip.io \
> --name istio > ruffy/istio-${InternalIp}.yaml
[root@vm175 istio-1.1.1]# cd ruffy
[root@vm175 ruffy]# ls
istio-10.20.1.175.yaml istio-init.yaml namespace.yaml
根據(jù)配置模板部署Isito組件
[root@vm175 istio-1.1.1]# kubectl apply -f ruffy/namespace.yaml
namespace/istio-system created
[root@vm175 istio-1.1.1]# kubectl apply -f ruffy/istio-init.yaml
configmap/istio-crd-10 created
configmap/istio-crd-11 created
serviceaccount/istio-init-service-account created
clusterrole.rbac.authorization.k8s.io/istio-init-istio-system configured
clusterrolebinding.rbac.authorization.k8s.io/istio-init-admin-role-binding-istio-system configured
job.batch/istio-init-crd-10 created
job.batch/istio-init-crd-11 created
[root@vm175 istio-1.1.1]# kubectl apply -f ruffy/istio-10.20.1.175.yaml
poddisruptionbudget.policy/istio-galley created
poddisruptionbudget.policy/istio-ingressgateway created
poddisruptionbudget.policy/istio-policy created
poddisruptionbudget.policy/istio-telemetry created
poddisruptionbudget.policy/istio-pilot created
……
rule.config.istio.io/promhttp created
rule.config.istio.io/promtcp created
rule.config.istio.io/promtcpconnectionopen created
rule.config.istio.io/promtcpconnectionclosed created
handler.config.istio.io/kubernetesenv created
rule.config.istio.io/kubeattrgenrulerule created
rule.config.istio.io/tcpkubeattrgenrulerule created
kubernetes.config.istio.io/attributes created
destinationrule.networking.istio.io/istio-policy created
destinationrule.networking.istio.io/istio-telemetry created
查看Isito部署狀態(tài)
[root@vm175 istio-1.1.1]# kubectl -n istio-system get all
NAME READY STATUS RESTARTS AGE
pod/grafana-7b46bf6b7c-xr2lw 1/1 Running 0 2m
pod/istio-citadel-5878d994cc-kfm7p 1/1 Running 0 2m
pod/istio-cleanup-secrets-1.1.1-wlk7p 0/1 Completed 0 2m
pod/istio-galley-6db4964df6-9lpsl 1/1 Running 0 2m
pod/istio-grafana-post-install-1.1.1-44lv7 0/1 Completed 0 2m
pod/istio-ingressgateway-cd5df7bc6-sgh6m 0/1 Running 0 2m
pod/istio-init-crd-10-q5kvp 0/1 Completed 0 3m
pod/istio-init-crd-11-kdd25 0/1 Completed 0 3m
pod/istio-pilot-597dd58685-hsp72 1/2 Running 0 2m
pod/istio-policy-67f66c8b5c-8kqwm 2/2 Running 5 2m
pod/istio-security-post-install-1.1.1-gcjrm 0/1 Completed 0 2m
pod/istio-sidecar-injector-59fc9d6f7d-j9prx 0/1 ContainerCreating 0 2m
pod/istio-telemetry-c5bfc457f-qqzb5 2/2 Running 4 2m
pod/istio-tracing-75dd89b8b4-2t2hl 0/1 ContainerCreating 0 2m
pod/kiali-5d68f4c676-bdltq 1/1 Running 0 2m
pod/prometheus-89bc5668c-7kp8b 0/1 Init:Error 1 2m
pod/servicegraph-57bfbbd697-6tldj 0/1 Running 0 2m
……
NAME DESIRED SUCCESSFUL AGE
job.batch/istio-cleanup-secrets-1.1.1 1 1 2m
job.batch/istio-grafana-post-install-1.1.1 1 1 2m
job.batch/istio-init-crd-10 1 1 3m
job.batch/istio-init-crd-11 1 1 3m
job.batch/istio-security-post-install-1.1.1 1 1 2m
增加grafana和prometheus的ingress文件
Istio-grafana.yaml
[root@vm175 ruffy]# cat istio-grafana-ingress.yaml
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: grafana
namespace: istio-system
labels:
app: grafana
annotations:
spec:
rules:
- host: granafa-istio.10.20.1.175.xip.io
http:
paths:
- path: /
backend:
serviceName: grafana
servicePort: 3000
Isito-prometheus-ingress.yaml
[root@vm175 ruffy]# cat istio-prometheus-ingress.yaml
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: istio-prometheus
namespace: istio-system
spec:
rules:
- host: prometheus-istio.10.20.1.175.xip.io
http:
paths:
- path: /prometheus
backend:
serviceName: prometheus
servicePort: 9090
查看部署的組件訪(fǎng)問(wèn)路徑
[root@vm175 ruffy]# kubectl -n istio-system get ing
NAME HOSTS ADDRESS PORTS AGE
grafana granafa-istio.10.20.1.175.xip.io 80 5m
istio-prometheus prometheus-istio.10.20.1.175.xip.io 80 5m
istio-servicegraph servicegraph-istio-system.10.20.1.175.nip.io 80 56m
istio-tracing tracing-istio-system.10.20.1.175.nip.io 80 56m
kiali kiali-istio-system.10.20.1.175.nip.io 80 56m
訪(fǎng)問(wèn)kiali時(shí),出現(xiàn)secret不存在的情況,需要通過(guò)kiali-secret.yaml文件創(chuàng)建secret,并且重啟kiali服務(wù)。
Kiali-secret.yaml文件
[root@vm175 ruffy]# cat kiali-secret.yaml
apiVersion: v1
kind: Secret
metadata:
name: kiali
namespace: istio-system
labels:
app: kiali
type: Opaque
data:
username: "YWRtaW4="
passphrase: "YWRtaW4="
訪(fǎng)問(wèn)Kiali
瀏覽器輸入地址:http://kiali-istio-system.10.20.1.175.nip.io/kiali/
用戶(hù)名/密碼:admin/admin
訪(fǎng)問(wèn)servicegraph
瀏覽器輸入地址:http://servicegraph-istio-system.10.20.1.175.nip.io/force/forcegraph.html
訪(fǎng)問(wèn)tracing
瀏覽器輸入地址:http://servicegraph-istio-system.10.20.1.175.nip.io/force/forcegraph.html
訪(fǎng)問(wèn)granafa
瀏覽器輸入地址:http://granafa-istio.10.20.1.175.xip.io/d/TSEY6jLmk/istio-galley-dashboard?refresh=5s&orgId=1
至此 Istio1.1及其依賴(lài)組件搭建完畢。
另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)cdcxhl.cn,海內(nèi)外云服務(wù)器15元起步,三天無(wú)理由+7*72小時(shí)售后在線(xiàn),公司持有idc許可證,提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國(guó)服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案,具有“安全穩(wěn)定、簡(jiǎn)單易用、服務(wù)可用性高、性?xún)r(jià)比高”等特點(diǎn)與優(yōu)勢(shì),專(zhuān)為企業(yè)上云打造定制,能夠滿(mǎn)足用戶(hù)豐富、多元化的應(yīng)用場(chǎng)景需求。
本文標(biāo)題:Istio1.1安裝部署實(shí)踐-創(chuàng)新互聯(lián)
標(biāo)題鏈接:http://m.rwnh.cn/article30/cecoso.html
成都網(wǎng)站建設(shè)公司_創(chuàng)新互聯(lián),為您提供搜索引擎優(yōu)化、用戶(hù)體驗(yàn)、網(wǎng)頁(yè)設(shè)計(jì)公司、軟件開(kāi)發(fā)、企業(yè)網(wǎng)站制作、標(biāo)簽優(yōu)化
聲明:本網(wǎng)站發(fā)布的內(nèi)容(圖片、視頻和文字)以用戶(hù)投稿、用戶(hù)轉(zhuǎn)載內(nèi)容為主,如果涉及侵權(quán)請(qǐng)盡快告知,我們將會(huì)在第一時(shí)間刪除。文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng),如需處理請(qǐng)聯(lián)系客服。電話(huà):028-86922220;郵箱:631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載,或轉(zhuǎn)載時(shí)需注明來(lái)源: 創(chuàng)新互聯(lián)
猜你還喜歡下面的內(nèi)容
全網(wǎng)營(yíng)銷(xiāo)推廣知識(shí)