istio

• Istio v1.13 中文文档

需要先安装metrics-server

• 通过helm安装istio

<

code> wget https://github.com/istio/istio/releases/download/1.13.2/istio-1.13.2-linux-amd64.tar.gz

tar -xvzvf istio-1.13.2-linux-amd64.tar.gz

cd istio-1.13.2

kubectl create namespace istio-system

helm install istio-base manifests/charts/base -n istio-system

helm install istiod manifests/charts/istio-control/istio-discovery –set global.hub=“istio” –set global.tag=“1.12.5” -n istio-system

helm install istio-ingress manifests/charts/gateways/istio-ingress –set global.hub=“istio” –set global.tag=“1.12.5” -n istio-system

helm install istio-egress manifests/charts/gateways/istio-egress –set global.hub=“istio” –set global.tag=“1.12.5” -n istio-system

kubectl get pods -n istio-system

NAME                                   READY   STATUS    RESTARTS   AGE
istio-egressgateway-76d9956fb4-x5hjf   1/1     Running   0          5m53s
istio-ingressgateway-75b7dc6d5-867r6   1/1     Running   0          6m35s
istiod-6ddb7976cf-dqdcq                1/1     Running   0          8m59s

• 给ns添加labelistio-injection=enabled, 开启自动注入sidecar

kubectl label namespace kube-okami istio-injection=enabled

• istio的认证问题排查（创建pod失败）
  • 问题排查
• 安装参考