本文主要演示一下如何在mac m2安装istio，及基于header的流量路由。
下载https://github.com/istio/istio/releases/download/1.18.2/istio-1.18.2-osx-arm64.tar.gz解压，并将istio-1.18.2/bin添加到PATH中。
istioctl install --set profile=demo -y✔ Istio core installed✔ Istiod installed✔ Egress gateways installed✔ Ingress gateways installed✔ Installation complete Making this installation the default for injection and validation.kubectl get nsNAME STATUS AGEdefault Active 75mistio-system Active 104skube-node-lease Active 75mkube-public Active 75mkube-system Active 75mlocal-path-storage Active 75m➜ ~ kubectl get pods -n istio-systemNAME READY STATUS RESTARTS AGEistio-egressgateway-75db994b58-jdztx 1/1 Running 0 61sistio-ingressgateway-79bb75ddbb-965t8 1/1 Running 0 61sistiod-68cb9f5cb6-jksg5 1/1 Running 0 115skubectl label namespace default istio-injection=enablednamespace/default labeled[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-eyjhQXc5-1690467241670)(https://istio.io/latest/zh/docs/examples/bookinfo/noistio.svg)]。
kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yamlservice/details createdserviceaccount/bookinfo-details createddeployment.apps/details-v1 createdservice/ratings createdserviceaccount/bookinfo-ratings createddeployment.apps/ratings-v1 createdservice/reviews createdserviceaccount/bookinfo-reviews createddeployment.apps/reviews-v1 createddeployment.apps/reviews-v2 createddeployment.apps/reviews-v3 createdservice/productpage createdserviceaccount/bookinfo-productpage createddeployment.apps/productpage-v1 createdkubectl get servicesNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEdetails ClusterIP 10.96.79.135 <none> 9080/TCP 74skubernetes ClusterIP 10.96.0.1 <none> 443/TCP 78mproductpage ClusterIP 10.96.86.114 <none> 9080/TCP 74sratings ClusterIP 10.96.26.22 <none> 9080/TCP 74sreviews ClusterIP 10.96.26.69 <none> 9080/TCP 74skubectl get podsNAME READY STATUS RESTARTS AGEdetails-v1-7c7dbcb4b5-vdlkt 2/2 Running 0 59mproductpage-v1-664d44d68d-lmbz8 2/2 Running 0 59mratings-v1-844796bf85-vzf7g 2/2 Running 0 59mreviews-v1-5cf854487-brgpt 2/2 Running 0 59mreviews-v2-955b74755-8rdww 2/2 Running 0 59mreviews-v3-797fc48bc9-xzzq8 2/2 Running 0 59m访问应用：
kubectl exec "$(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}')" -c ratings -- curl -sS productpage:9080/productpage | grep -o "<title>.*</title>"开启网关：
kubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yamlgatewayworking.istio.io/bookinfo-gateway createdvirtualserviceworking.istio.io/bookinfo created验证配置：
istioctl analyze✔ No validation issues found when analyzing namespace: default.确定入站 IP 和端口：
kubectl get service -n istio-systemNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEistio-egressgateway ClusterIP 10.96.85.74 <none> 80/TCP,443/TCP 91mistio-ingressgateway LoadBalancer 10.96.159.108 <pending> 15021:32027/TCP,80:32707/TCP,443:30486/TCP,31400:32398/TCP,15443:32482/TCP 91mistiod ClusterIP 10.96.8.225 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP 92m这里没有external-ip，通过cluster-ip访问：
kubectl exec "$(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}')" -c ratings -- curl -sS 10.96.159.108/productpage | grep "Reviews served by" -A2 <dt>Reviews served by:</dt> <u>reviews-v2-955b74755-twbrw</u>多访问几次，会发现有时候是路由到reviews的V1版本，有时候是V2版本，有时候是V3版本。
kubectl apply -f samples/bookinfo/networking/destination-rule-all.yamldestinationruleworking.istio.io/productpage createddestinationruleworking.istio.io/reviews createddestinationruleworking.istio.io/ratings createddestinationruleworking.istio.io/details createdkubectl get destinationrules -o yamlapiVersion: v1items:- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"details","namespace":"default"},"spec":{"host":"details","subsets":[{"labels":{"version":"v1"},"name":"v1"},{"labels":{"version":"v2"},"name":"v2"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: details namespace: default resourceVersion: "22396" uid: ec433861-b9ce-40e3-96de-3ac4e0851c86 spec: host: details subsets: - labels: version: v1 name: v1 - labels: version: v2 name: v2- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"productpage","namespace":"default"},"spec":{"host":"productpage","subsets":[{"labels":{"version":"v1"},"name":"v1"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: productpage namespace: default resourceVersion: "22393" uid: 070bf079-610f-4066-a99d-d0fad8e4150e spec: host: productpage subsets: - labels: version: v1 name: v1- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"ratings","namespace":"default"},"spec":{"host":"ratings","subsets":[{"labels":{"version":"v1"},"name":"v1"},{"labels":{"version":"v2"},"name":"v2"},{"labels":{"version":"v2-mysql"},"name":"v2-mysql"},{"labels":{"version":"v2-mysql-vm"},"name":"v2-mysql-vm"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: ratings namespace: default resourceVersion: "22395" uid: 931b7b84-f0f4-4c99-b81a-dfb004521e4b spec: host: ratings subsets: - labels: version: v1 name: v1 - labels: version: v2 name: v2 - labels: version: v2-mysql name: v2-mysql - labels: version: v2-mysql-vm name: v2-mysql-vm- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"reviews","namespace":"default"},"spec":{"host":"reviews","subsets":[{"labels":{"version":"v1"},"name":"v1"},{"labels":{"version":"v2"},"name":"v2"},{"labels":{"version":"v3"},"name":"v3"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: reviews namespace: default resourceVersion: "22394" uid: e11a97ae-a62c-4fbd-bcb6-990e2bc47abf spec: host: reviews subsets: - labels: version: v1 name: v1 - labels: version: v2 name: v2 - labels: version: v3 name: v3kind: Listmetadata: resourceVersion: ""kubectl apply -f samples/bookinfo/networking/virtual-service-all-v1.yamlvirtualserviceworking.istio.io/productpage createdvirtualserviceworking.istio.io/reviews createdvirtualserviceworking.istio.io/ratings createdvirtualserviceworking.istio.io/details createdkubectl get virtualservices -o yamlapiVersion: v1items:- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"details","namespace":"default"},"spec":{"host":"details","subsets":[{"labels":{"version":"v1"},"name":"v1"},{"labels":{"version":"v2"},"name":"v2"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: details namespace: default resourceVersion: "22396" uid: ec433861-b9ce-40e3-96de-3ac4e0851c86 spec: host: details subsets: - labels: version: v1 name: v1 - labels: version: v2 name: v2- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"productpage","namespace":"default"},"spec":{"host":"productpage","subsets":[{"labels":{"version":"v1"},"name":"v1"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: productpage namespace: default resourceVersion: "22393" uid: 070bf079-610f-4066-a99d-d0fad8e4150e spec: host: productpage subsets: - labels: version: v1 name: v1- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"ratings","namespace":"default"},"spec":{"host":"ratings","subsets":[{"labels":{"version":"v1"},"name":"v1"},{"labels":{"version":"v2"},"name":"v2"},{"labels":{"version":"v2-mysql"},"name":"v2-mysql"},{"labels":{"version":"v2-mysql-vm"},"name":"v2-mysql-vm"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: ratings namespace: default resourceVersion: "22395" uid: 931b7b84-f0f4-4c99-b81a-dfb004521e4b spec: host: ratings subsets: - labels: version: v1 name: v1 - labels: version: v2 name: v2 - labels: version: v2-mysql name: v2-mysql - labels: version: v2-mysql-vm name: v2-mysql-vm- apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"DestinationRule","metadata":{"annotations":{},"name":"reviews","namespace":"default"},"spec":{"host":"reviews","subsets":[{"labels":{"version":"v1"},"name":"v1"},{"labels":{"version":"v2"},"name":"v2"},{"labels":{"version":"v3"},"name":"v3"}]}} creationTimestamp: "2023-07-27T13:39:56Z" generation: 1 name: reviews namespace: default resourceVersion: "22394" uid: e11a97ae-a62c-4fbd-bcb6-990e2bc47abf spec: host: reviews subsets: - labels: version: v1 name: v1 - labels: version: v2 name: v2 - labels: version: v3 name: v3kind: Listmetadata: resourceVersion: ""➜ istio-1.18.2 kubectl apply -f samples/bookinfo/networking/virtual-service-all-v1.yamlvirtualserviceworking.istio.io/productpage createdvirtualserviceworking.istio.io/reviews createdvirtualserviceworking.istio.io/ratings createdvirtualserviceworking.istio.io/details created➜ istio-1.18.2 kubectl get virtualservices -o yamlapiVersion: v1items:- apiVersion: networking.istio.io/v1beta1 kind: VirtualService metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"bookinfo","namespace":"default"},"spec":{"gateways":["bookinfo-gateway"],"hosts":["*"],"http":[{"match":[{"uri":{"exact":"/productpage"}},{"uri":{"prefix":"/static"}},{"uri":{"exact":"/login"}},{"uri":{"exact":"/logout"}},{"uri":{"prefix":"/api/v1/products"}}],"route":[{"destination":{"host":"productpage","port":{"number":9080}}}]}]}} creationTimestamp: "2023-07-27T13:34:16Z" generation: 1 name: bookinfo namespace: default resourceVersion: "21772" uid: 3130ef2e-22f2-4505-983f-705f969720cd spec: gateways: - bookinfo-gateway hosts: - '*' http: - match: - uri: exact: /productpage - uri: prefix: /static - uri: exact: /login - uri: exact: /logout - uri: prefix: /api/v1/products route: - destination: host: productpage port: number: 9080- apiVersion: networking.istio.io/v1beta1 kind: VirtualService metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"details","namespace":"default"},"spec":{"hosts":["details"],"http":[{"route":[{"destination":{"host":"details","subset":"v1"}}]}]}} creationTimestamp: "2023-07-27T13:41:07Z" generation: 1 name: details namespace: default resourceVersion: "22528" uid: bb2f5625-7fd7-40c5-88a3-18d00ac92c15 spec: hosts: - details http: - route: - destination: host: details subset: v1- apiVersion: networking.istio.io/v1beta1 kind: VirtualService metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"productpage","namespace":"default"},"spec":{"hosts":["productpage"],"http":[{"route":[{"destination":{"host":"productpage","subset":"v1"}}]}]}} creationTimestamp: "2023-07-27T13:41:07Z" generation: 1 name: productpage namespace: default resourceVersion: "22525" uid: 377fa7eb-00a3-4554-af95-5e438ba3e467 spec: hosts: - productpage http: - route: - destination: host: productpage subset: v1- apiVersion: networking.istio.io/v1beta1 kind: VirtualService metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"ratings","namespace":"default"},"spec":{"hosts":["ratings"],"http":[{"route":[{"destination":{"host":"ratings","subset":"v1"}}]}]}} creationTimestamp: "2023-07-27T13:41:07Z" generation: 1 name: ratings namespace: default resourceVersion: "22527" uid: ef8dba74-a058-476d-b0b5-59ceb540eab2 spec: hosts: - ratings http: - route: - destination: host: ratings subset: v1- apiVersion: networking.istio.io/v1beta1 kind: VirtualService metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"reviews","namespace":"default"},"spec":{"hosts":["reviews"],"http":[{"route":[{"destination":{"host":"reviews","subset":"v1"}}]}]}} creationTimestamp: "2023-07-27T13:41:07Z" generation: 1 name: reviews namespace: default resourceVersion: "22526" uid: f44879f8-a9ac-4a8b-9870-f327442134dd spec: hosts: - reviews http: - route: - destination: host: reviews subset: v1kind: Listmetadata: resourceVersion: ""将Istio配置为路由到Bookinfo微服务的v1版本，reviews服务的版本1。
kubectl exec "$(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}')" -c ratings -- curl -sS 10.96.159.108/productpage | grep "Reviews served by" -A2 <dt>Reviews served by:</dt> <u>reviews-v1-5cf854487-86f8d</u>多执行几次发现都是路由到reviews的v1版本。
kubectl apply -f samples/bookinfo/networking/virtual-service-reviews-test-v2.yamlvirtualserviceworking.istio.io/reviews configuredkubectl get virtualservice reviews -o yamlapiVersion: networking.istio.io/v1beta1kind: VirtualServicemetadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"reviews","namespace":"default"},"spec":{"hosts":["reviews"],"http":[{"match":[{"headers":{"end-user":{"exact":"jason"}}}],"route":[{"destination":{"host":"reviews","subset":"v2"}}]},{"route":[{"destination":{"host":"reviews","subset":"v1"}}]}]}} creationTimestamp: "2023-07-27T13:41:07Z" generation: 3 name: reviews namespace: default resourceVersion: "23802" uid: f44879f8-a9ac-4a8b-9870-f327442134ddspec: hosts: - reviews http: - match: - headers: end-user: exact: jason route: - destination: host: reviews subset: v2 - route: - destination: host: reviews subset: v1可以看到名为reviews的VirtualService的generation被更新了，比其第一版新增了v2的路由，针对名为x-route-env，值为feature1的header的请求路由到v2的subset。
kubectl get svc istio-ingressgateway -n istio-system -o yamlapiVersion: v1kind: Servicemetadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"app":"istio-ingressgateway","install.operator.istio.io/owning-resource":"unknown","install.operator.istio.io/owning-resource-namespace":"istio-system","istio":"ingressgateway","istio.io/rev":"default","operator.istio.io/component":"IngressGateways","operator.istio.io/managed":"Reconcile","operator.istio.io/version":"1.18.2","release":"istio"},"name":"istio-ingressgateway","namespace":"istio-system"},"spec":{"ports":[{"name":"status-port","port":15021,"protocol":"TCP","targetPort":15021},{"name":"http2","port":80,"protocol":"TCP","targetPort":8080},{"name":"https","port":443,"protocol":"TCP","targetPort":8443},{"name":"tcp","port":31400,"protocol":"TCP","targetPort":31400},{"name":"tls","port":15443,"protocol":"TCP","targetPort":15443}],"selector":{"app":"istio-ingressgateway","istio":"ingressgateway"},"type":"LoadBalancer"}} creationTimestamp: "2023-07-27T09:42:26Z" labels: app: istio-ingressgateway install.operator.istio.io/owning-resource: unknown install.operator.istio.io/owning-resource-namespace: istio-system istio: ingressgateway istio.io/rev: default operator.istio.io/component: IngressGateways operator.istio.io/managed: Reconcile operator.istio.io/version: 1.18.2 release: istio name: istio-ingressgateway namespace: istio-system resourceVersion: "3466" uid: 9699d091-4567-4c60-bc0b-366c332ca84espec: allocateLoadBalancerNodePorts: true clusterIP: 10.96.159.108 clusterIPs: - 10.96.159.108 externalTrafficPolicy: Cluster internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: status-port nodePort: 32027 port: 15021 protocol: TCP targetPort: 15021 - name: http2 nodePort: 32707 port: 80 protocol: TCP targetPort: 8080 - name: https nodePort: 30486 port: 443 protocol: TCP targetPort: 8443 - name: tcp nodePort: 32398 port: 31400 protocol: TCP targetPort: 31400 - name: tls nodePort: 32482 port: 15443 protocol: TCP targetPort: 15443 selector: app: istio-ingressgateway istio: ingressgateway sessionAffinity: None type: LoadBalancerstatus: loadBalancer: {}可以看到http2的nodePort为32707。
kubectl get node kind-control-plane -o wideNAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIMEkind-control-plane Ready control-plane 5h28m v1.27.3 192.168.228.2 <none> Debian GNU/Linux 11 (bullseye) 6.3.13-orbstack-00217-g0f5ad12a9255 containerd://1.7.1可以看到nodeip为192.168.228.2。
于是访问http://192.168.228.2:32707/productpage，没有评分，如果以用户jason(密码jason)登录，发现有评分，Reviews served by为reviews-v2-955b74755-twbrw，路由到了v2版本。
不经过gateway，直接通过productpage的clusterip访问。
kubectl get svc productpageNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEproductpage ClusterIP 10.96.214.31 <none> 9080/TCP 31mkubectl exec "$(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}')" -c ratings -- curl -H "Cookie:session=eyJ1c2VyIjoiamFzb24ifQ.ZMJ29Q.QzbItYVJISKKnrbii9ii0fJTU38" -sS 10.96.214.31:9080/productpage | grep "Reviews served by" -A2 <dt>Reviews served by:</dt> <u>reviews-v2-955b74755-twbrw</u>发现也能够正确路由到reviews的v2版本。
移除jason的cookie。
kubectl exec "$(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}')" -c ratings -- curl -sS 10.96.214.31:9080/productpage | grep "Reviews served by" -A2 <dt>Reviews served by:</dt> <u>reviews-v1-5cf854487-86f8d</u>发现路由到了reviews的v1版本。
istio于2023年7月12日正式从CNCF正式毕业了，是时候在生产上把istio用起来了，istio的sidecar路由相比于基于特定语言sdk做路由更为省事。
本文链接：http://www.28at.com/showinfo-26-12327-0.htmlIstio流量路由小试牛刀，这几个方法超有效
声明：本网页内容旨在传播知识，若有侵权等问题请及时与本网联系，我们将在第一时间删除处理。邮件：2376512515@qq.com
Copyright © 2016-2023 天津谷骐科技有限公司 版权所有 sitemap.xml
违法及侵权请联系：2376512515@qq.com 津ICP备18001702号
津公网安备 12010102000574号
