istio1.0安装

1. istio1.0安装

创建 istio 目录

[root@centos-110 ~]# mkdir istio
[root@centos-110 ~]# cd istio

1.1 获取安装包

链接：https://pan.baidu.com/s/1HQsXvN3Rgo5F7C9XYkhZng
提取码：uqwk 

解压：

tar -zxvf istio-1.0.0-linux.tar.gz

1.2 安装istioctl

cp istio-1.0.0/bin/istioctl /usr/local/bin/

验证istioctl 安装成功

[root@test2 istio]# istioctl version
Version: 1.0.0
GitRevision: 3a136c90ec5e308f236e0d7ebb5c4c5e405217f4
User: root@71a9470ea93c
Hub: gcr.io/istio-release
GolangVersion: go1.10.1
BuildStatus: Clean

需要先拉取镜像：

docker pull daocloud.io/liukuan73/proxy_init:1.0.0
docker pull daocloud.io/liukuan73/galley:1.0.0
docker pull daocloud.io/liukuan73/mixer:1.0.0
docker pull daocloud.io/liukuan73/proxyv2:1.0.0
docker pull daocloud.io/liukuan73/pilot:1.0.0
docker pull daocloud.io/liukuan73/citadel:1.0.0
docker pull daocloud.io/liukuan73/servicegraph:1.0.0
docker pull daocloud.io/liukuan73/sidecar_injector:1.0.0
docker pull daocloud.io/liukuan73/istio-grafana:1.0.0
docker pull daocloud.io/liukuan73/hyperkube:v1.7.6_coreos.0

给镜像重新打标签，保证和下面步骤中istio-demo.yaml里面的镜像保持一致

docker tag daocloud.io/liukuan73/proxy_init:1.0.0 gcr.io/istio-release/proxy_init:1.0.0
docker tag daocloud.io/liukuan73/hyperkube:v1.7.6_coreos.0 quay.io/coreos/hyperkube:v1.7.6_coreos.0
docker tag daocloud.io/liukuan73/galley:1.0.0 gcr.io/istio-release/galley:1.0.0
docker tag daocloud.io/liukuan73/proxyv2:1.0.0 gcr.io/istio-release/proxyv2:1.0.0
docker tag daocloud.io/liukuan73/istio-grafana:1.0.0 gcr.io/istio-release/grafana:1.0.0
docker tag daocloud.io/liukuan73/mixer:1.0.0 gcr.io/istio-release/mixer:1.0.0
docker tag daocloud.io/liukuan73/pilot:1.0.0 gcr.io/istio-release/pilot:1.0.0
docker tag daocloud.io/liukuan73/citadel:1.0.0 gcr.io/istio-release/citadel:1.0.0
docker tag daocloud.io/liukuan73/servicegraph:1.0.0 gcr.io/istio-release/servicegraph:1.0.0
docker tag daocloud.io/liukuan73/sidecar_injector:1.0.0 gcr.io/istio-release/sidecar_injector:1.0.0

注意：这个时候不能把原先的镜像给删除，删除原来镜像后，之后打的标签镜像也会跟着删除

1.3 部署istio

1.3.1、安装Istio的CRD（Custom Resource Definitions）

kubectl apply -f /root/istio/istio-1.0.0/install/kubernetes/helm/istio/templates/crds.yaml

1.3.2、安装Istio - Sidecars之间不启用TLS认证

kubectl apply -f /root/istio/istio-1.0.0/install/kubernetes/istio-demo.yaml

注意：

启动文件默认配置的通过外部LoadBalancer访问istio-ingressgateway，

如果没有外部LoadBalancer，需要修改启动文件使用NodePort访问istio-ingressgateway：sed -i 's/LoadBalancer/NodePort/g' /root/istio/istio-1.0.0/install/kubernetes/istio-demo.yaml

本实验需要先修改为NodePort然后再执行上面的操作

1.3.3 验证安装是否成功

查看是否所有服务和pod都正常：发现有两个不正常，没有影响的，

[root@test2 ~]# kubectl get pods -n istio-system
NAME READY STATUS RESTARTS AGE
grafana-86645d6b4d-4tvjx 1/1 Running 2 18h
istio-citadel-55d9bb9b5f-mx2jq 1/1 Running 2 18h
istio-cleanup-secrets-pd8nj 0/1 Completed 0 18h
istio-egressgateway-74bbdd9669-c4k5r 1/1 Running 3 18h
istio-galley-d4bc6c974-c5znr 1/1 Running 3 18h
istio-grafana-post-install-jj96w 0/1 Completed 0 18h
istio-ingressgateway-756584cc64-f6llj 1/1 Running 3 18h
istio-pilot-7dd78846f5-jsd7b 2/2 Running 4 18h
istio-policy-b9d65465-vmnz2 2/2 Running 4 18h
istio-sidecar-injector-854f6498d9-pgpxg 1/1 Running 2 18h
istio-statsd-prom-bridge-549d687fd9-664w2 1/1 Running 2 18h
istio-telemetry-64fff55fdd-wbn69 2/2 Running 4 18h
istio-tracing-7596597bd7-cb25d 1/1 Running 2 18h
prometheus-6ffc56584f-9kzqm 1/1 Running 2 18h
servicegraph-7bdb8bfc9d-mj7nw 1/1 Running 2 18h

[root@test2 ~]# kubectl get svc -n istio-system
NAME                       TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                                                                                                     AGE
grafana                    ClusterIP   10.111.151.30    <none>        3000/TCP                                                                                                    4m
istio-citadel              ClusterIP   10.111.58.240    <none>        8060/TCP,9093/TCP                                                                                           4m
istio-egressgateway        ClusterIP   10.97.76.172     <none>        80/TCP,443/TCP                                                                                              4m
istio-galley               ClusterIP   10.96.7.223      <none>        443/TCP,9093/TCP                                                                                            4m
istio-ingressgateway       NodePort    10.102.210.209   <none>        80:31380/TCP,443:31390/TCP,31400:31400/TCP,15011:35476/TCP,8060:37349/TCP,15030:42116/TCP,15031:37047/TCP   4m
istio-pilot                ClusterIP   10.104.75.8      <none>        15010/TCP,15011/TCP,8080/TCP,9093/TCP                                                                       4m
istio-policy               ClusterIP   10.99.66.239     <none>        9091/TCP,15004/TCP,9093/TCP                                                                                 4m
istio-sidecar-injector     ClusterIP   10.109.151.144   <none>        443/TCP                                                                                                     4m
istio-statsd-prom-bridge   ClusterIP   10.107.239.158   <none>        9102/TCP,9125/UDP                                                                                           4m
istio-telemetry            ClusterIP   10.111.200.34    <none>        9091/TCP,15004/TCP,9093/TCP,42422/TCP                                                                       4m
jaeger-agent               ClusterIP   None             <none>        5775/UDP,6831/UDP,6832/UDP                                                                                  4m
jaeger-collector           ClusterIP   10.97.185.97     <none>        14267/TCP,14268/TCP                                                                                         4m
jaeger-query               ClusterIP   10.102.95.55     <none>        16686/TCP                                                                                                   4m
prometheus                 ClusterIP   10.109.160.215   <none>        9090/TCP                                                                                                    4m
servicegraph               ClusterIP   10.100.66.9      <none>        8088/TCP                                                                                                    4m
tracing                    ClusterIP   10.99.88.51      <none>        80/TCP                                                                                                      4m
zipkin                     ClusterIP   10.105.223.138   <none>        9411/TCP                                                                                                    4m

至此，Istio 已经安装完成了

参照：

https://www.cnblogs.com/rickie/p/istio.html

https://blog.csdn.net/liukuan73/article/details/81165716