istio1.0安裝

1. istio1.0安裝

建立 istio 目錄

[root@centos-110 ~]# mkdir istio
[root@centos-110 ~]# cd istio

1.1 獲取安裝包

連接：https://pan.baidu.com/s/1HQsXvN3Rgo5F7C9XYkhZng 
提取碼：uqwk 


解壓：

tar -zxvf istio-1.0.0-linux.tar.gz


1.2 安裝istioctl

cp istio-1.0.0/bin/istioctl /usr/local/bin/

驗證istioctl 安裝成功

[root@test2 istio]# istioctl version
Version: 1.0.0
GitRevision: 3a136c90ec5e308f236e0d7ebb5c4c5e405217f4
User: root@71a9470ea93c
Hub: gcr.io/istio-release
GolangVersion: go1.10.1
BuildStatus: Clean



須要先拉取鏡像：

docker pull daocloud.io/liukuan73/proxy_init:1.0.0
docker pull daocloud.io/liukuan73/galley:1.0.0
docker pull daocloud.io/liukuan73/mixer:1.0.0
docker pull daocloud.io/liukuan73/proxyv2:1.0.0
docker pull daocloud.io/liukuan73/pilot:1.0.0
docker pull daocloud.io/liukuan73/citadel:1.0.0
docker pull daocloud.io/liukuan73/servicegraph:1.0.0
docker pull daocloud.io/liukuan73/sidecar_injector:1.0.0
docker pull daocloud.io/liukuan73/istio-grafana:1.0.0
docker pull daocloud.io/liukuan73/hyperkube:v1.7.6_coreos.0

給鏡像從新打標籤，保證和下面步驟中istio-demo.yaml裏面的鏡像保持一致

docker tag daocloud.io/liukuan73/proxy_init:1.0.0 gcr.io/istio-release/proxy_init:1.0.0
docker tag daocloud.io/liukuan73/hyperkube:v1.7.6_coreos.0 quay.io/coreos/hyperkube:v1.7.6_coreos.0
docker tag daocloud.io/liukuan73/galley:1.0.0 gcr.io/istio-release/galley:1.0.0
docker tag daocloud.io/liukuan73/proxyv2:1.0.0 gcr.io/istio-release/proxyv2:1.0.0
docker tag daocloud.io/liukuan73/istio-grafana:1.0.0 gcr.io/istio-release/grafana:1.0.0
docker tag daocloud.io/liukuan73/mixer:1.0.0 gcr.io/istio-release/mixer:1.0.0
docker tag daocloud.io/liukuan73/pilot:1.0.0 gcr.io/istio-release/pilot:1.0.0
docker tag daocloud.io/liukuan73/citadel:1.0.0 gcr.io/istio-release/citadel:1.0.0
docker tag daocloud.io/liukuan73/servicegraph:1.0.0 gcr.io/istio-release/servicegraph:1.0.0
docker tag daocloud.io/liukuan73/sidecar_injector:1.0.0 gcr.io/istio-release/sidecar_injector:1.0.0

注意：這個時候不能把原先的鏡像給刪除，刪除原來鏡像後，以後打的標籤鏡像也會跟着刪除


1.3 部署istio

1.3.1、安裝Istio的CRD（Custom Resource Definitions）

kubectl apply -f /root/istio/istio-1.0.0/install/kubernetes/helm/istio/templates/crds.yaml

1.3.二、安裝Istio - Sidecars之間不啓用TLS認證

kubectl apply -f /root/istio/istio-1.0.0/install/kubernetes/istio-demo.yaml


注意：

啓動文件默認配置的經過外部LoadBalancer訪問istio-ingressgateway，

若是沒有外部LoadBalancer，須要修改啓動文件使用NodePort訪問istio-ingressgateway：sed -i 's/LoadBalancer/NodePort/g' /root/istio/istio-1.0.0/install/kubernetes/istio-demo.yaml

本實驗須要先修改成NodePort而後再執行上面的操做


1.3.3 驗證安裝是否成功

查看是否全部服務和pod都正常：發現有兩個不正常，沒有影響的，

[root@test2 ~]# kubectl get pods -n istio-system
NAME READY STATUS RESTARTS AGE
grafana-86645d6b4d-4tvjx 1/1 Running 2 18h
istio-citadel-55d9bb9b5f-mx2jq 1/1 Running 2 18h
istio-cleanup-secrets-pd8nj 0/1 Completed 0 18h
istio-egressgateway-74bbdd9669-c4k5r 1/1 Running 3 18h
istio-galley-d4bc6c974-c5znr 1/1 Running 3 18h
istio-grafana-post-install-jj96w 0/1 Completed 0 18h
istio-ingressgateway-756584cc64-f6llj 1/1 Running 3 18h
istio-pilot-7dd78846f5-jsd7b 2/2 Running 4 18h
istio-policy-b9d65465-vmnz2 2/2 Running 4 18h
istio-sidecar-injector-854f6498d9-pgpxg 1/1 Running 2 18h
istio-statsd-prom-bridge-549d687fd9-664w2 1/1 Running 2 18h
istio-telemetry-64fff55fdd-wbn69 2/2 Running 4 18h
istio-tracing-7596597bd7-cb25d 1/1 Running 2 18h
prometheus-6ffc56584f-9kzqm 1/1 Running 2 18h
servicegraph-7bdb8bfc9d-mj7nw 1/1 Running 2 18h

[root@test2 ~]# kubectl get svc -n istio-system
NAME                       TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                                                                                                     AGE
grafana                    ClusterIP   10.111.151.30    <none>        3000/TCP                                                                                                    4m
istio-citadel              ClusterIP   10.111.58.240    <none>        8060/TCP,9093/TCP                                                                                           4m
istio-egressgateway        ClusterIP   10.97.76.172     <none>        80/TCP,443/TCP                                                                                              4m
istio-galley               ClusterIP   10.96.7.223      <none>        443/TCP,9093/TCP                                                                                            4m
istio-ingressgateway       NodePort    10.102.210.209   <none>        80:31380/TCP,443:31390/TCP,31400:31400/TCP,15011:35476/TCP,8060:37349/TCP,15030:42116/TCP,15031:37047/TCP   4m
istio-pilot                ClusterIP   10.104.75.8      <none>        15010/TCP,15011/TCP,8080/TCP,9093/TCP                                                                       4m
istio-policy               ClusterIP   10.99.66.239     <none>        9091/TCP,15004/TCP,9093/TCP                                                                                 4m
istio-sidecar-injector     ClusterIP   10.109.151.144   <none>        443/TCP                                                                                                     4m
istio-statsd-prom-bridge   ClusterIP   10.107.239.158   <none>        9102/TCP,9125/UDP                                                                                           4m
istio-telemetry            ClusterIP   10.111.200.34    <none>        9091/TCP,15004/TCP,9093/TCP,42422/TCP                                                                       4m
jaeger-agent               ClusterIP   None             <none>        5775/UDP,6831/UDP,6832/UDP                                                                                  4m
jaeger-collector           ClusterIP   10.97.185.97     <none>        14267/TCP,14268/TCP                                                                                         4m
jaeger-query               ClusterIP   10.102.95.55     <none>        16686/TCP                                                                                                   4m
prometheus                 ClusterIP   10.109.160.215   <none>        9090/TCP                                                                                                    4m
servicegraph               ClusterIP   10.100.66.9      <none>        8088/TCP                                                                                                    4m
tracing                    ClusterIP   10.99.88.51      <none>        80/TCP                                                                                                      4m
zipkin                     ClusterIP   10.105.223.138   <none>        9411/TCP                                                                                                    4m


至此，Istio 已經安裝完成了



參照：

https://www.cnblogs.com/rickie/p/istio.html

https://blog.csdn.net/liukuan73/article/details/81165716