Shulou(Shulou.com)05/31 Report--

Editor to share with you how to deploy and try out istio-1.0.0 in kubernetes. I hope you will get something after reading this article. Let's discuss it together.

One: brief introduction

This article describes how to deploy istio-1.0.0 in a kubernetes1.10.4 cluster and try out the bookinfo instance application that comes with istio.

Two: installation

1. Get the installation package

Wget https://github.com/istio/istio/releases/download/1.0.0/istio-1.0.0-linux.tar.gz

Tar-zxvf istio-1.0.0-linux.tar.gz

two。 Install istioctl

If you manually inject sidecar, you need to use this command:

Cp istio-1.0./bin/istioctl / usr/local/bin/

Set the environment variable:

ISTIO_HOME=/root/istio-1.0

PATH=$ISTIO_HOME/bin:$PATH

Export ISTIO_HOME PATH

3. Install istio core components

Kubectl apply-f istio-1.0.0/install/kubernetes/istio-demo.yaml

If the images related to gcr.io and quay.io cannot be downloaded, you can replace them with your own images:

Daocloud.io/liukuan73/proxy_init:1.0.0

Daocloud.io/liukuan73/galley:1.0.0

Daocloud.io/liukuan73/mixer:1.0.0

Daocloud.io/liukuan73/proxyv2:1.0.0

Daocloud.io/liukuan73/pilot:1.0.0

Daocloud.io/liukuan73/citadel:1.0.0

Daocloud.io/liukuan73/servicegraph:1.0.0

Daocloud.io/liukuan73/sidecar_injector:1.0.0

Daocloud.io/liukuan73/istio-grafana:1.0.0

4. Verification of installation results

Three: try out

1.sidecar automatic injection configuration

After Istio is installed, if you want sidecar to be automatically injected into pod when the application starts, you need to configure the following four steps:

a. Install istio-sidecar-injector

After istio-sidecar-injector is installed, when kubectl create is applied, the sidecar container will be automatically injected into pod instead of manual injection.

b. Enable mutating webhook admission controller

Add the following two controller:MutatingAdmissionWebhook,ValidatingAdmissionWebhook in the correct order to the admission controller of the startup parameters of kube-apiserver

-- admission-control=ServiceAccount,Initializers,NamespaceLifecycle,NamespaceExists,LimitRanger,DefaultStorageClass,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota

c. Enable admissionregistration api

Kubectl api-versions | grep admissionregistration

Admissionregistration.k8s.io/v1beta1

d. Hit label for the namespace that needs to automatically inject sidecar

Kubectl label namespace istio-test istio-injection=enabled

Kubectl get namespace-L istio-injection

two。 Start the sample application

a. Example structure

b. Installation example

Kubectl apply-n istio-test-f istio-1.0.0/samples/bookinfo/platform/kube/bookinfo.yaml

c. Configure traefik Ingress

To facilitate access verification outside the cluster, configure the Ingress proxy

ApiVersion: extensions/v1beta1kind: Ingressmetadata: name: traefik-ingress namespace: kube-systemspec: rules:-host: elasticsearch.donkey http: paths:-path: / backend: serviceName: elasticsearch-logging servicePort: 9200-host: kibana.donkey http: paths:-path: / backend: serviceName: kibana-logging servicePort: 5601-host: locust .donkey http: paths:-path: / backend: serviceName: locust-master servicePort: 8089-host: dashboard.donkey http: paths:-path: / backend: serviceName: kubernetes-dashboard servicePort: 32666---apiVersion: extensions/v1beta1kind: Ingressmetadata: name: istio-ingress namespace: istio-systemspec: rules:-host: grafana.istio .donkey http: paths:apiVersion: extensions/v1beta1kind: Ingressmetadata: name: traefik-ingress namespace: kube-systemspec: rules:-host: elasticsearch.donkey http: paths:-path: / backend: serviceName: elasticsearch-logging servicePort: 9200-host: kibana.donkey http: paths:-path: / backend: serviceName: kibana-logging ServicePort: 5601-host: locust.donkey http: paths:-path: / backend: serviceName: locust-master servicePort: 8089-host: dashboard.donkey http: paths:-path: / backend: serviceName: kubernetes-dashboard servicePort: 32666---apiVersion: extensions/v1beta1kind: Ingressmetadata: name: istio-ingress namespace: istio-systemspec: Rules:-host: grafana.istio.donkey http: paths:-path: / backend: serviceName: grafana servicePort: 3000-host: zipkin.istio.donkey http:

3. Example verification

A.bookinfo sample http://productpage.donkey/productpage?u=normal

b. Monitoring http://grafana.istio.donkey

C.Prometheus page http://prometheus.istio.donkey

D.ServiceGraph page

After reading this article, I believe you have a certain understanding of "how to deploy and trial istio-1.0.0 in kubernetes". If you want to know more about it, you are welcome to follow the industry information channel. Thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.