✔️ k8s 1.13, Istio 1.3.2에서 테스트하였습니다.
1 개요[ | ]
- 쿠버네티스 Istio 1.3 설치
2 사전작업[ | ]
3 Istio 릴리즈 다운로드[ | ]
testuser@localhost:~$ curl -L https://git.io/getLatestIstio | ISTIO_VERSION=1.3.2 sh -
... (생략)
Istio 1.3.2 Download Complete!
Istio has been successfully downloaded into the istio-1.3.2 folder on your system.
Next Steps:
See https://istio.io/docs/setup/kubernetes/install/ to add Istio to your Kubernetes cluster.
To configure the istioctl client tool for your workstation,
add the /home/testuser/istio-1.3.2/bin directory to your environment path variable with:
export PATH="$PATH:/home/testuser/istio-1.3.2/bin"
Begin the Istio pre-installation verification check by running:
istioctl verify-install
Need more information? Visit https://istio.io/docs/setup/kubernetes/install/
testuser@localhost:~$ cd istio-1.3.2
testuser@localhost:~/istio-1.3.2$ sudo mv bin/istioctl /usr/local/bin/
testuser@localhost:~/istio-1.3.2$ istioctl version --remote=false
1.3.2
4 Istio 설치 (helm)[ | ]
testuser@localhost:~/istio-1.3.2$ helm install install/kubernetes/helm/istio-init --name istio-init --namespace istio-system
NAME: istio-init
LAST DEPLOYED: Sun Oct 13 19:26:05 2019
NAMESPACE: istio-system
STATUS: DEPLOYED
RESOURCES:
==> v1/ClusterRole
NAME AGE
istio-init-istio-system 0s
==> v1/ClusterRoleBinding
NAME AGE
istio-init-admin-role-binding-istio-system 0s
==> v1/ConfigMap
NAME DATA AGE
istio-crd-10 1 0s
istio-crd-11 1 0s
istio-crd-12 1 0s
==> v1/Job
NAME COMPLETIONS DURATION AGE
istio-init-crd-10-1.3.2 0/1 0s 0s
istio-init-crd-11-1.3.2 0/1 0s 0s
istio-init-crd-12-1.3.2 0/1 0s 0s
==> v1/Pod(related)
NAME READY STATUS RESTARTS AGE
istio-init-crd-10-1.3.2-dfr5t 0/1 ContainerCreating 0 0s
istio-init-crd-11-1.3.2-pnfwp 0/1 ContainerCreating 0 0s
istio-init-crd-12-1.3.2-dczqs 0/1 ContainerCreating 0 0s
==> v1/ServiceAccount
NAME SECRETS AGE
istio-init-service-account 1 0s
testuser@localhost:~/istio-1.3.2$ kubectl get crds | grep 'istio.io' | wc -l
23
testuser@localhost:~/istio-1.3.2$ helm install install/kubernetes/helm/istio --name istio --namespace istio-system --values install/kubernetes/helm/istio/values-istio-demo.yaml
NAME: istio
LAST DEPLOYED: Sun Oct 13 19:31:35 2019
NAMESPACE: istio-system
STATUS: DEPLOYED
RESOURCES:
==> v1/ClusterRole
NAME AGE
istio-citadel-istio-system 29s
istio-galley-istio-system 29s
istio-grafana-post-install-istio-system 29s
istio-mixer-istio-system 29s
istio-pilot-istio-system 29s
istio-reader 29s
istio-sidecar-injector-istio-system 29s
kiali 29s
kiali-viewer 29s
prometheus-istio-system 29s
==> v1/ClusterRoleBinding
NAME AGE
istio-citadel-istio-system 29s
istio-galley-admin-role-binding-istio-system 29s
istio-grafana-post-install-role-binding-istio-system 29s
istio-kiali-admin-role-binding-istio-system 29s
istio-mixer-admin-role-binding-istio-system 29s
istio-multi 29s
istio-pilot-istio-system 29s
istio-sidecar-injector-admin-role-binding-istio-system 29s
prometheus-istio-system 29s
==> v1/ConfigMap
NAME DATA AGE
istio 2 29s
istio-galley-configuration 1 30s
istio-grafana 2 30s
istio-grafana-configuration-dashboards-citadel-dashboard 1 30s
istio-grafana-configuration-dashboards-galley-dashboard 1 30s
istio-grafana-configuration-dashboards-istio-mesh-dashboard 1 30s
istio-grafana-configuration-dashboards-istio-performance-dashboard 1 30s
istio-grafana-configuration-dashboards-istio-service-dashboard 1 30s
istio-grafana-configuration-dashboards-istio-workload-dashboard 1 30s
istio-grafana-configuration-dashboards-mixer-dashboard 1 30s
istio-grafana-configuration-dashboards-pilot-dashboard 1 30s
istio-grafana-custom-resyntaxhighlights 2 30s
istio-security-custom-resyntaxhighlights 2 30s
istio-sidecar-injector 2 29s
kiali 1 30s
prometheus 1 30s
==> v1/Deployment
NAME READY UP-TO-DATE AVAILABLE AGE
grafana 0/1 1 0 29s
istio-citadel 0/1 1 0 29s
istio-egressgateway 0/1 1 0 29s
istio-galley 0/1 1 0 29s
istio-ingressgateway 0/1 1 0 29s
istio-pilot 0/1 1 0 29s
istio-policy 1/1 1 1 29s
istio-sidecar-injector 0/1 1 0 29s
istio-telemetry 0/1 1 0 29s
istio-tracing 1/1 1 1 29s
kiali 0/1 1 0 29s
prometheus 0/1 1 0 29s
==> v1/Pod(related)
NAME READY STATUS RESTARTS AGE
grafana-575c7c4784-9k9jj 0/1 ContainerCreating 0 29s
istio-citadel-746b4cc66c-9hll2 0/1 ContainerCreating 0 28s
istio-egressgateway-59c55b9d9f-bb5wz 0/1 Running 0 29s
istio-galley-668765c7dc-nzkmx 0/1 ContainerCreating 0 29s
istio-ingressgateway-c68d6d48-sv9cl 0/1 Running 0 29s
istio-pilot-5c7d686c6f-9kljx 0/2 ContainerCreating 0 29s
istio-policy-7687947f48-827ff 2/2 Running 0 29s
istio-sidecar-injector-7488c45bcb-5b6sn 0/1 ContainerCreating 0 28s
istio-telemetry-685d854954-dnz52 0/2 ContainerCreating 0 29s
istio-tracing-8456d6548f-7j2kd 1/1 Running 0 28s
kiali-7dd44f7696-78z2m 0/1 Running 0 29s
prometheus-5679cb4dcd-cq7n8 0/1 ContainerCreating 0 29s
==> v1/Role
NAME AGE
istio-ingressgateway-sds 29s
==> v1/RoleBinding
NAME AGE
istio-ingressgateway-sds 29s
==> v1/Secret
NAME TYPE DATA AGE
kiali Opaque 2 30s
==> v1/Service
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
grafana ClusterIP 100.65.35.40 <none> 3000/TCP 29s
istio-citadel ClusterIP 100.69.106.26 <none> 8060/TCP,15014/TCP 29s
istio-egressgateway ClusterIP 100.68.228.238 <none> 80/TCP,443/TCP,15443/TCP 29s
istio-galley ClusterIP 100.69.26.236 <none> 443/TCP,15014/TCP,9901/TCP 29s
istio-ingressgateway LoadBalancer 100.71.193.158 aa2352d6ceda4... 15020:31516/TCP,80:31380/TCP,443:31390/TCP,31400:31400/TCP,15029:30581/TCP,15030:32618/TCP,15031:31224/TCP,15032:30810/TCP,15443:31688/TCP 29s
istio-pilot ClusterIP 100.71.134.134 <none> 15010/TCP,15011/TCP,8080/TCP,15014/TCP 29s
istio-policy ClusterIP 100.71.227.36 <none> 9091/TCP,15004/TCP,15014/TCP 29s
istio-sidecar-injector ClusterIP 100.64.171.171 <none> 443/TCP,15014/TCP 29s
istio-telemetry ClusterIP 100.65.189.207 <none> 9091/TCP,15004/TCP,15014/TCP,42422/TCP 29s
jaeger-agent ClusterIP None <none> 5775/UDP,6831/UDP,6832/UDP 28s
jaeger-collector ClusterIP 100.68.91.0 <none> 14267/TCP,14268/TCP 28s
jaeger-query ClusterIP 100.68.88.241 <none> 16686/TCP 29s
kiali ClusterIP 100.69.161.46 <none> 20001/TCP 29s
prometheus ClusterIP 100.71.101.136 <none> 9090/TCP 29s
tracing ClusterIP 100.65.118.76 <none> 80/TCP 28s
zipkin ClusterIP 100.70.187.101 <none> 9411/TCP 28s
==> v1/ServiceAccount
NAME SECRETS AGE
istio-citadel-service-account 1 29s
istio-egressgateway-service-account 1 29s
istio-galley-service-account 1 29s
istio-grafana-post-install-account 1 29s
istio-ingressgateway-service-account 1 29s
istio-mixer-service-account 1 29s
istio-multi 1 29s
istio-pilot-service-account 1 29s
istio-security-post-install-account 1 29s
istio-sidecar-injector-service-account 1 29s
kiali-service-account 1 29s
prometheus 1 29s
==> v1alpha2/attributemanifest
NAME AGE
istioproxy 28s
kubernetes 28s
==> v1alpha2/handler
NAME AGE
kubernetesenv 28s
prometheus 28s
stdio 28s
==> v1alpha2/instance
NAME AGE
accesslog 28s
attributes 28s
requestcount 28s
requestduration 28s
requestsize 28s
responsesize 28s
tcpaccesslog 28s
tcpbytereceived 28s
tcpbytesent 28s
tcpconnectionsclosed 28s
tcpconnectionsopened 28s
==> v1alpha2/rule
NAME AGE
kubeattrgenrulerule 28s
promhttp 28s
promtcp 28s
promtcpconnectionclosed 28s
promtcpconnectionopen 28s
stdio 28s
stdiotcp 28s
tcpkubeattrgenrulerule 28s
==> v1alpha3/DestinationRule
NAME AGE
istio-policy 29s
istio-telemetry 29s
==> v1beta1/ClusterRole
NAME AGE
istio-security-post-install-istio-system 29s
==> v1beta1/ClusterRoleBinding
NAME AGE
istio-security-post-install-role-binding-istio-system 29s
==> v1beta1/MutatingWebhookConfiguration
NAME AGE
istio-sidecar-injector 28s
==> v1beta1/PodDisruptionBudget
NAME MIN AVAILABLE MAX UNAVAILABLE ALLOWED DISRUPTIONS AGE
istio-egressgateway 1 N/A 0 30s
istio-galley 1 N/A 0 30s
istio-ingressgateway 1 N/A 0 30s
istio-pilot 1 N/A 0 30s
istio-policy 1 N/A 0 30s
istio-sidecar-injector 1 N/A 0 30s
istio-telemetry 1 N/A 0 30s
NOTES:
Thank you for installing Istio.
Your release is named Istio.
To get started running application with Istio, execute the following steps:
1. Label namespace that application object will be deployed to by the following command (take default namespace as an example)
$ kubectl label namespace default istio-injection=enabled
$ kubectl get namespace -L istio-injection
2. Deploy your applications
$ kubectl apply -f <your-application>.yaml
For more information on running Istio, visit:
https://istio.io/
testuser@localhost:~/istio-1.3.2$ kubectl get pod -n istio-system
NAME READY STATUS RESTARTS AGE
grafana-575c7c4784-9k9jj 1/1 Running 0 2m50s
istio-citadel-746b4cc66c-9hll2 1/1 Running 0 2m49s
istio-egressgateway-59c55b9d9f-bb5wz 1/1 Running 0 2m50s
istio-galley-668765c7dc-nzkmx 1/1 Running 0 2m50s
istio-ingressgateway-c68d6d48-sv9cl 1/1 Running 0 2m50s
istio-init-crd-10-1.3.2-dfr5t 0/1 Completed 0 8m21s
istio-init-crd-11-1.3.2-pnfwp 0/1 Completed 0 8m21s
istio-init-crd-12-1.3.2-dczqs 0/1 Completed 0 8m21s
istio-pilot-5c7d686c6f-9kljx 2/2 Running 0 2m50s
istio-policy-7687947f48-827ff 2/2 Running 3 2m50s
istio-sidecar-injector-7488c45bcb-5b6sn 1/1 Running 0 2m49s
istio-telemetry-685d854954-dnz52 2/2 Running 1 2m50s
istio-tracing-8456d6548f-7j2kd 1/1 Running 0 2m49s
kiali-7dd44f7696-78z2m 1/1 Running 0 2m50s
prometheus-5679cb4dcd-cq7n8 1/1 Running 0 2m50s
5 같이 보기[ | ]
6 참고[ | ]
로그인하시면 댓글을 쓸 수 있습니다.
{{ comment.name }}
{{ comment.created | snstime }}
-
{{comment.page_title}} ―{{comment.name}}