kubernetes系列之十八：使用helm安装istio
一、前言istio是Kubernetes平台微服务管理的框架标准，是Service Mesh在Kubernetes平台的标准实现。相比于其它的微服务框架，istio提供非代码介入的框架机制，使用sidecar机制将微服务的服务面和管理面连接起来，而且使用的sidecar envoy是一个高效的proxy。Istio 辑上分为数据平面和控制平面。数据平面由一组以 sidecar 方式部署...
·
一、前言
istio是Kubernetes平台微服务管理的框架标准，是Service Mesh在Kubernetes平台的标准实现。相比于其它的微服务框架，istio提供非代码介入的框架机制，使用sidecar机制将微服务的服务面和管理面连接起来，而且使用的sidecar envoy是一个高效的proxy。
Istio 辑上分为数据平面和控制平面。
- 数据平面由一组以 sidecar 方式部署的智能代理（Envoy）组成。这些代理可以调节和控制微服务及 Mixer 之间所有的网络通信。
- 控制平面负责管理和配置代理来路由流量。此外控制平面配置 Mixer 以实施策略和收集遥测数据
Istio 架构如下图所示：
- Envoy用于分析和控制进出微服务容器的数据流量
- Mixer进行访问控制策略的配置和下发
- Pilot将多种服务发现功能抽象化之后为Envoy提供服务发现功能
- Citadel为加密和认证提供支持
转载自https://blog.csdn.net/cloudvtech
二、通过helm安装istio
2.1 下载
curl -L https://git.io/getLatestIstio | sh -
export PATH="$PATH:/root/istio/istio-1.0.2/bin”2.2 修改配置
install/kubernetes/helm/istio/values.yaml
grafana:
enabled: true
replicaCount: 1
image: grafana
persist: false
storageClassName: ""
security:
enabled: false
adminUser: admin
adminPassword: admin
service:
annotations: {}
externalPort: 32088
internalPort: 3000
nodePort:
enabled: true
port: 320882.3 安装部署
helm install install/kubernetes/helm/istio \
--name istio \
--namespace istio-system \
--set tracing.enabled=true \
--set servicegraph.enabled=true \
--set prometheus.enabled=true \
--set tracing.jaeger.enabled=true \
--set grafana.enabled=true \
--set global.configValidation=false \
--set global.nodePort=true安装之后可以编辑各个service来暴露nodePort进行外部访问，例如：
kubectl edit svc grafana -n istio-system
apiVersion: v1
kind: Service
metadata:
creationTimestamp: 2018-09-21T17:24:45Z
labels:
app: grafana
chart: grafana-1.0.1
heritage: Tiller
release: istio
name: grafana
namespace: istio-system
resourceVersion: "494980"
selfLink: /api/v1/namespaces/istio-system/services/grafana
uid: 3ba200b6-bdc3-11e8-99a0-08002763f94a
spec:
clusterIP: 10.108.169.84
externalTrafficPolicy: Cluster
ports:
- nodePort: 32088
port: 3000
protocol: TCP
targetPort: 3000
selector:
app: grafana
sessionAffinity: None
type: NodePort
status:
loadBalancer: {}查看POD和服务状态
kubectl get pods -n istio-system
NAME READY STATUS RESTARTS AGE
grafana-6cd5644cb-wclpw 1/1 Running 0 10m
istio-citadel-746c765786-krbs6 1/1 Running 0 20m
istio-egressgateway-7b46794587-jz695 1/1 Running 0 20m
istio-galley-75c6976d79-9x72h 1/1 Running 0 20m
istio-ingressgateway-57f76dc4db-vp245 1/1 Running 0 20m
istio-pilot-7b96cfbf76-m7tnt 2/2 Running 0 20m
istio-policy-6677c87b9f-f55xg 2/2 Running 0 20m
istio-sidecar-injector-879fd9dfc-4tjhx 1/1 Running 0 20m
istio-statsd-prom-bridge-549d687fd9-tsbss 1/1 Running 0 20m
istio-telemetry-7d46d668db-c4w47 2/2 Running 0 20m
istio-tracing-7596597bd7-thqg5 1/1 Running 0 20m
prometheus-6ffc56584f-nb88n 1/1 Running 0 20m
servicegraph-676b468cbb-qqr72 1/1 Running 0 20m
kubectl get svc -n istio-system
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
grafana NodePort 10.108.169.84 <none> 3000:32088/TCP 20m
istio-citadel ClusterIP 10.103.37.166 <none> 8060/TCP,9093/TCP 20m
istio-egressgateway ClusterIP 10.104.76.248 <none> 80/TCP,443/TCP 20m
istio-galley ClusterIP 10.109.212.39 <none> 443/TCP,9093/TCP 20m
istio-ingressgateway LoadBalancer 10.98.29.30 <pending> 80:31380/TCP,443:31390/TCP,31400:31400/TCP,15011:32385/TCP,8060:32103/TCP,853:31575/TCP,15030:31684/TCP,15031:32170/TCP 20m
istio-pilot ClusterIP 10.103.77.42 <none> 15010/TCP,15011/TCP,8080/TCP,9093/TCP 20m
istio-policy ClusterIP 10.110.236.247 <none> 9091/TCP,15004/TCP,9093/TCP 20m
istio-sidecar-injector ClusterIP 10.96.108.99 <none> 443/TCP 20m
istio-statsd-prom-bridge ClusterIP 10.102.10.120 <none> 9102/TCP,9125/UDP 20m
istio-telemetry ClusterIP 10.109.168.53 <none> 9091/TCP,15004/TCP,9093/TCP,42422/TCP 20m
jaeger-agent ClusterIP None <none> 5775/UDP,6831/UDP,6832/UDP 20m
jaeger-collector ClusterIP 10.98.192.45 <none> 14267/TCP,14268/TCP 20m
jaeger-query ClusterIP 10.101.32.241 <none> 16686/TCP 20m
prometheus ClusterIP 10.100.123.211 <none> 9090/TCP 20m
prometheus-nodeport NodePort 10.102.78.159 <none> 9090:32090/TCP 20m
servicegraph ClusterIP 10.109.32.171 <none> 8088/TCP 20m
tracing ClusterIP 10.109.159.42 <none> 80/TCP 20m
zipkin ClusterIP 10.99.239.123 <none> 9411/TCP 20m2.4 获取访问URL
export INGRESS_PORT=$(kubectl -n istio-system get service istio-ingressgateway -o jsonpath='{.spec.ports[?(@.name=="http")].nodePort}')
export SECURE_INGRESS_PORT=$(kubectl -n istio-system get service istio-ingressgateway -o jsonpath='{.spec.ports[?(@.name=="https")].nodePort}')
export INGRESS_HOST=$(kubectl get po -l istio=ingressgateway -n istio-system -o 'jsonpath={.items[0].status.hostIP}')
export GATEWAY_URL=$INGRESS_HOST:$INGRESS_PORT转载自https://blog.csdn.net/cloudvtech
三、安装应用
3.1 部署bookinfo服务
kubectl apply -f <(istioctl kube-inject -f samples/bookinfo/platform/kube/bookinfo.yaml)
kubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yaml3.2 查看状态
kubectl get pods
[root@k8s-install-node istio-1.0.2]# kubectl get pods
NAME READY STATUS RESTARTS AGE
details-v1-7db64f6477-vkj54 2/2 Running 0 20m
productpage-v1-8998997b9-p759l 2/2 Running 0 20m
ratings-v1-754ffd9d5c-c7gc9 2/2 Running 0 20m
reviews-v1-5fb89c7d9-ch279 2/2 Running 0 20m
reviews-v2-5748d654d9-l689q 2/2 Running 0 20m
reviews-v3-5dd59fc497-mwg9p 2/2 Running 0 20m
[root@k8s-install-node istio-1.0.2]# kubectl describe pods productpage-v1-8998997b9-p759l | grep Image:
Image: docker.io/istio/proxy_init:1.0.2
Image: istio/examples-bookinfo-productpage-v1:1.8.0
Image: docker.io/istio/proxyv2:1.0.2
kubectl get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
details ClusterIP 10.109.1.224 <none> 9080/TCP 21m
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 15d
productpage ClusterIP 10.100.156.148 <none> 9080/TCP 21m
ratings ClusterIP 10.104.230.106 <none> 9080/TCP 21m
reviews ClusterIP 10.110.149.101 <none> 9080/TCP 21m3.3 测试通过istio API网关测试bookinfo服务
curl -o /dev/null -s -w "%{http_code}\n" http://${GATEWAY_URL}/productpage
200转载自https://blog.csdn.net/cloudvtech
四、通过浏览器访问Bookinfo服务和istio的服务
4.1 访问bookinfo服务
http://192.168.56.11:31380/productpage
4.2 查看Grafana
kubectl edit svc grafana -n istio-system
Istio Mesh Dashboard
Mixer Dashboard
4.3 查看servicegraph
kubectl edit svc servicegraph -n istio-system
http://192.168.56.11:30921/force/forcegraph.html
http://192.168.56.11:30921/dotviz
4.4 查看trace
kubectl edit svc tracing -n istio-system
http://192.168.56.11:30922/search
转载自https://blog.csdn.net/cloudvtech
五、删除服务和istio
samples/bookinfo/platform/kube/cleanup.sh
helm del --purge istio转载自https://blog.csdn.net/cloudvtech
开源、云原生的融合云平台
更多推荐
0
0- 0
已为社区贡献27条内容
所有评论(0)