Service Mesh服务网格技术探究---VMWare+k8s集群+Istio系列：Istio安装
前言
前面几篇文章里记录了k8s的安装过程，由于安装的时候没有指定版本号，中间踩了一些坑，建议安装的时候参考一下Istio官网提供的各版本在k8s环境下的支持情况，并参考官网的安装文档。
一、下载并安装
新建文件夹存放istio安装包，并切换到该安装路径
[root@k8s-master ~]# cd / [root@k8s-master /]# mkdir app [root@k8s-master /]# cd app/
下载istio-1.11.3安装包
[root@k8s-master app]# wget https://github.com/istio/istio/releases/download/1.11.3/istio-1.11.3-linux-amd64.tar.gz --2021-09-28 18:06:41-- https://github.com/istio/istio/releases/download/1.11.3/istio-1.11.3-linux-amd64.tar.gz Resolving github.com (github.com)... 140.82.114.3, 140.82.114.4, 140.82.114.3 Connecting to github.com (github.com)|140.82.114.3|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://github-releases.githubusercontent.com/74175805/99b19f20-dc4d-402b-8ed7-fcb2c53f2fff?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210928%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=202109 28T100646Z&X-Amz-Expires=300&X-Amz-Signature=ad4dd861b6d339995ab58f79795c69b3bc75eaa02b2d6a07da80f86c3149ed21&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=74175805&response-content-disposition=attachment%3B%20filename%3Distio -1.11.3-linux-amd64.tar.gz&response-content-type=application%2Foctet-stream [following] --2021-09-28 18:06:48-- https://github-releases.githubusercontent.com/74175805/99b19f20-dc4d-402b-8ed7-fcb2c53f2fff?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210928%2Fus-east-1%2Fs3%2Faws4_request&X- Amz-Date=20210928T100646Z&X-Amz-Expires=300&X-Amz-Signature=ad4dd861b6d339995ab58f79795c69b3bc75eaa02b2d6a07da80f86c3149ed21&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=74175805&response-content-disposition=attachment%3B%20f ilename%3Distio-1.11.3-linux-amd64.tar.gz&response-content-type=application%2Foctet-stream Resolving github-releases.githubusercontent.com (github-releases.githubusercontent.com)... 185.199.110.154, 185.199.108.154, 185.199.109.154, ... Connecting to github-releases.githubusercontent.com (github-releases.githubusercontent.com)|185.199.110.154|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 24036123 (23M) [application/octet-stream] Saving to: ‘istio-1.11.3-linux-amd64.tar.gz’ istio-1.11.3-linux-amd64.tar.gz 100%[=====================================================================================================================================>] 22.92M 1.15MB/s in 26s 2021-09-28 18:07:14 (915 KB/s) - ‘istio-1.11.3-linux-amd64.tar.gz’ saved [24036123/24036123]
解压到安装目录
[root@k8s-master app]# tar zxvf istio-1.11.3-linux-amd64.tar.gz -C /app/ istio-1.11.3/ istio-1.11.3/LICENSE istio-1.11.3/bin/ istio-1.11.3/bin/istioctl istio-1.11.3/manifests/ istio-1.11.3/manifests/profiles/ istio-1.11.3/manifests/profiles/demo.yaml istio-1.11.3/manifests/profiles/openshift.yaml istio-1.11.3/manifests/profiles/minimal.yaml istio-1.11.3/manifests/profiles/empty.yaml istio-1.11.3/manifests/profiles/preview.yaml istio-1.11.3/manifests/profiles/default.yaml istio-1.11.3/manifests/profiles/remote.yaml istio-1.11.3/manifests/profiles/external.yaml istio-1.11.3/manifests/charts/ istio-1.11.3/manifests/charts/istio-cni/ istio-1.11.3/manifests/charts/istio-cni/values.yaml istio-1.11.3/manifests/charts/istio-cni/templates/ istio-1.11.3/manifests/charts/istio-cni/templates/daemonset.yaml istio-1.11.3/manifests/charts/istio-cni/templates/configmap-cni.yaml istio-1.11.3/manifests/charts/istio-cni/templates/clusterrole.yaml istio-1.11.3/manifests/charts/istio-cni/templates/clusterrolebinding.yaml istio-1.11.3/manifests/charts/istio-cni/templates/serviceaccount.yaml istio-1.11.3/manifests/charts/istio-cni/Chart.yaml istio-1.11.3/manifests/charts/base/ istio-1.11.3/manifests/charts/base/values.yaml istio-1.11.3/manifests/charts/base/NOTES.txt istio-1.11.3/manifests/charts/base/templates/ istio-1.11.3/manifests/charts/base/templates/services.yaml istio-1.11.3/manifests/charts/base/templates/role.yaml istio-1.11.3/manifests/charts/base/templates/rolebinding.yaml istio-1.11.3/manifests/charts/base/templates/reader-serviceaccount.yaml istio-1.11.3/manifests/charts/base/templates/clusterrole.yaml istio-1.11.3/manifests/charts/base/templates/crds.yaml istio-1.11.3/manifests/charts/base/templates/clusterrolebinding.yaml istio-1.11.3/manifests/charts/base/templates/endpoints.yaml istio-1.11.3/manifests/charts/base/templates/serviceaccount.yaml istio-1.11.3/manifests/charts/base/crds/ istio-1.11.3/manifests/charts/base/crds/crd-all.gen.yaml istio-1.11.3/manifests/charts/base/crds/crd-operator.yaml istio-1.11.3/manifests/charts/base/kustomization.yaml istio-1.11.3/manifests/charts/base/Chart.yaml istio-1.11.3/manifests/charts/base/files/ istio-1.11.3/manifests/charts/base/files/gen-istio-cluster.yaml istio-1.11.3/manifests/charts/istio-control/ istio-1.11.3/manifests/charts/istio-control/istio-discovery/ istio-1.11.3/manifests/charts/istio-control/istio-discovery/values.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/NOTES.txt istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/ istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/reader-clusterrolebinding.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/telemetryv2_1.10.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/telemetryv2_1.11.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/configmap-jwks.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/configmap.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/autoscale.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/deployment.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/role.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/rolebinding.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/validatingwebhookconfiguration.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/telemetryv2_1.9.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/service.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/clusterrole.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/mutatingwebhook.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/reader-clusterrole.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/clusterrolebinding.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/istiod-injector-configmap.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/poddisruptionbudget.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/serviceaccount.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/templates/revision-tags.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/kustomization.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/Chart.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/files/ istio-1.11.3/manifests/charts/istio-control/istio-discovery/files/gateway-injection-template.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/files/grpc-agent.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/files/injection-template.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/files/grpc-simple.yaml istio-1.11.3/manifests/charts/istio-control/istio-discovery/files/gen-istio.yaml istio-1.11.3/manifests/charts/install-OpenShift.md istio-1.11.3/manifests/charts/UPDATING-CHARTS.md istio-1.11.3/manifests/charts/istiod-remote/ istio-1.11.3/manifests/charts/istiod-remote/values.yaml istio-1.11.3/manifests/charts/istiod-remote/NOTES.txt istio-1.11.3/manifests/charts/istiod-remote/templates/ istio-1.11.3/manifests/charts/istiod-remote/templates/reader-clusterrolebinding.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/crd-all.gen.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/configmap.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/role.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/rolebinding.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/validatingwebhookconfiguration.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/crd-operator.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/reader-serviceaccount.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/clusterrole.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/mutatingwebhook.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/reader-clusterrole.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/clusterrolebinding.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/istiod-injector-configmap.yaml istio-1.11.3/manifests/charts/istiod-remote/templates/serviceaccount.yaml istio-1.11.3/manifests/charts/istiod-remote/Chart.yaml istio-1.11.3/manifests/charts/istiod-remote/files/ istio-1.11.3/manifests/charts/istiod-remote/files/gateway-injection-template.yaml istio-1.11.3/manifests/charts/istiod-remote/files/injection-template.yaml istio-1.11.3/manifests/charts/README-helm3.md istio-1.11.3/manifests/charts/README.md istio-1.11.3/manifests/charts/istio-operator/ istio-1.11.3/manifests/charts/istio-operator/values.yaml istio-1.11.3/manifests/charts/istio-operator/templates/ istio-1.11.3/manifests/charts/istio-operator/templates/deployment.yaml istio-1.11.3/manifests/charts/istio-operator/templates/service_account.yaml istio-1.11.3/manifests/charts/istio-operator/templates/service.yaml istio-1.11.3/manifests/charts/istio-operator/templates/clusterrole_binding.yaml istio-1.11.3/manifests/charts/istio-operator/templates/clusterrole.yaml istio-1.11.3/manifests/charts/istio-operator/templates/namespace.yaml istio-1.11.3/manifests/charts/istio-operator/templates/crds.yaml istio-1.11.3/manifests/charts/istio-operator/crds/ istio-1.11.3/manifests/charts/istio-operator/crds/crd-operator.yaml istio-1.11.3/manifests/charts/istio-operator/Chart.yaml istio-1.11.3/manifests/charts/istio-operator/files/ istio-1.11.3/manifests/charts/istio-operator/files/gen-operator.yaml istio-1.11.3/manifests/charts/gateways/ istio-1.11.3/manifests/charts/gateways/istio-egress/ istio-1.11.3/manifests/charts/gateways/istio-egress/values.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/NOTES.txt istio-1.11.3/manifests/charts/gateways/istio-egress/templates/ istio-1.11.3/manifests/charts/gateways/istio-egress/templates/rolebindings.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/templates/injected-deployment.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/templates/autoscale.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/templates/deployment.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/templates/role.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/templates/service.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/templates/_affinity.tpl istio-1.11.3/manifests/charts/gateways/istio-egress/templates/poddisruptionbudget.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/templates/serviceaccount.yaml istio-1.11.3/manifests/charts/gateways/istio-egress/Chart.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/ istio-1.11.3/manifests/charts/gateways/istio-ingress/values.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/NOTES.txt istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/ istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/rolebindings.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/injected-deployment.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/autoscale.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/deployment.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/role.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/service.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/_affinity.tpl istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/poddisruptionbudget.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/templates/serviceaccount.yaml istio-1.11.3/manifests/charts/gateways/istio-ingress/Chart.yaml istio-1.11.3/manifests/examples/ istio-1.11.3/manifests/examples/user-gateway/ istio-1.11.3/manifests/examples/user-gateway/ingress-gateway-only.yaml istio-1.11.3/manifests/examples/customresource/ istio-1.11.3/manifests/examples/customresource/istio_v1alpha1_istiooperator_cr.yaml istio-1.11.3/manifest.yaml istio-1.11.3/tools/ istio-1.11.3/tools/_istioctl istio-1.11.3/tools/certs/ istio-1.11.3/tools/certs/common.mk istio-1.11.3/tools/certs/Makefile.k8s.mk istio-1.11.3/tools/certs/README.md istio-1.11.3/tools/certs/Makefile.selfsigned.mk istio-1.11.3/tools/istioctl.bash istio-1.11.3/README.md istio-1.11.3/samples/ istio-1.11.3/samples/httpbin/ istio-1.11.3/samples/httpbin/httpbin-nodeport.yaml istio-1.11.3/samples/httpbin/sample-client/ istio-1.11.3/samples/httpbin/sample-client/fortio-deploy.yaml istio-1.11.3/samples/httpbin/README.md istio-1.11.3/samples/httpbin/httpbin.yaml istio-1.11.3/samples/httpbin/httpbin-vault.yaml istio-1.11.3/samples/httpbin/httpbin-gateway.yaml istio-1.11.3/samples/kubernetes-blog/ istio-1.11.3/samples/kubernetes-blog/bookinfo-reviews-v2.yaml istio-1.11.3/samples/kubernetes-blog/bookinfo-v1.yaml istio-1.11.3/samples/kubernetes-blog/bookinfo-ratings.yaml istio-1.11.3/samples/extauthz/ istio-1.11.3/samples/extauthz/src/ istio-1.11.3/samples/extauthz/src/Makefile istio-1.11.3/samples/extauthz/ext-authz.yaml istio-1.11.3/samples/extauthz/local-ext-authz.yaml istio-1.11.3/samples/extauthz/README.md istio-1.11.3/samples/tcp-echo/ istio-1.11.3/samples/tcp-echo/tcp-echo-services.yaml istio-1.11.3/samples/tcp-echo/tcp-echo.yaml istio-1.11.3/samples/tcp-echo/src/ istio-1.11.3/samples/tcp-echo/README.md istio-1.11.3/samples/tcp-echo/tcp-echo-all-v1.yaml istio-1.11.3/samples/tcp-echo/tcp-echo-20-v2.yaml istio-1.11.3/samples/jwt-server/ istio-1.11.3/samples/jwt-server/src/ istio-1.11.3/samples/jwt-server/src/Makefile istio-1.11.3/samples/jwt-server/jwt-server.yaml istio-1.11.3/samples/operator/ istio-1.11.3/samples/operator/cni-on.yaml istio-1.11.3/samples/operator/pilot-advanced-override.yaml istio-1.11.3/samples/operator/values-global.yaml istio-1.11.3/samples/operator/default-install.yaml istio-1.11.3/samples/operator/values-pilot.yaml istio-1.11.3/samples/operator/pilot-k8s.yaml istio-1.11.3/samples/websockets/ istio-1.11.3/samples/websockets/app.yaml istio-1.11.3/samples/websockets/route.yaml istio-1.11.3/samples/websockets/README.md istio-1.11.3/samples/sleep/ istio-1.11.3/samples/sleep/sleep-vault.yaml istio-1.11.3/samples/sleep/README.md istio-1.11.3/samples/sleep/sleep.yaml istio-1.11.3/samples/bookinfo/ istio-1.11.3/samples/bookinfo/swagger.yaml istio-1.11.3/samples/bookinfo/networking/ istio-1.11.3/samples/bookinfo/networking/destination-rule-all-mtls.yaml istio-1.11.3/samples/bookinfo/networking/fault-injection-details-v1.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-reviews-v3.yaml istio-1.11.3/samples/bookinfo/networking/destination-rule-reviews.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-reviews-jason-v2-v3.yaml istio-1.11.3/samples/bookinfo/networking/bookinfo-gateway.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-all-v1.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-reviews-test-v2.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-ratings-test-delay.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-reviews-80-20.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-details-v2.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-ratings-mysql-vm.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-reviews-v2-v3.yaml istio-1.11.3/samples/bookinfo/networking/destination-rule-all.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-ratings-db.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-reviews-90-10.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-reviews-50-v3.yaml istio-1.11.3/samples/bookinfo/networking/certmanager-gateway.yaml istio-1.11.3/samples/bookinfo/networking/egress-rule-google-apis.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-ratings-mysql.yaml istio-1.11.3/samples/bookinfo/networking/virtual-service-ratings-test-abort.yaml istio-1.11.3/samples/bookinfo/src/ istio-1.11.3/samples/bookinfo/src/ratings/ istio-1.11.3/samples/bookinfo/src/ratings/package.json istio-1.11.3/samples/bookinfo/src/reviews/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/shared/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/src/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/src/test/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/src/test/java/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/src/test/java/it/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/src/test/java/it/rest/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/servers/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-wlpcfg/servers/LibertyProjectServer/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/test/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/test/java/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/test/java/test/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/main/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/main/webapp/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/main/webapp/WEB-INF/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/main/java/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/main/java/application/ istio-1.11.3/samples/bookinfo/src/reviews/reviews-application/src/main/java/application/rest/ istio-1.11.3/samples/bookinfo/src/mysql/ istio-1.11.3/samples/bookinfo/src/productpage/ istio-1.11.3/samples/bookinfo/src/productpage/test-requirements.txt istio-1.11.3/samples/bookinfo/src/productpage/templates/ istio-1.11.3/samples/bookinfo/src/productpage/static/ istio-1.11.3/samples/bookinfo/src/productpage/static/bootstrap/ istio-1.11.3/samples/bookinfo/src/productpage/static/bootstrap/fonts/ istio-1.11.3/samples/bookinfo/src/productpage/static/bootstrap/js/ istio-1.11.3/samples/bookinfo/src/productpage/static/bootstrap/css/ istio-1.11.3/samples/bookinfo/src/productpage/requirements.txt istio-1.11.3/samples/bookinfo/src/productpage/tests/ istio-1.11.3/samples/bookinfo/src/productpage/tests/unit/ istio-1.11.3/samples/bookinfo/src/build-services.sh istio-1.11.3/samples/bookinfo/src/mongodb/ istio-1.11.3/samples/bookinfo/src/mongodb/script.sh istio-1.11.3/samples/bookinfo/src/mongodb/ratings_data.json istio-1.11.3/samples/bookinfo/src/details/ istio-1.11.3/samples/bookinfo/README.md istio-1.11.3/samples/bookinfo/build_push_update_images.sh istio-1.11.3/samples/bookinfo/platform/ istio-1.11.3/samples/bookinfo/platform/kube/ istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-reviews-v2.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-certificate.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-details.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-ratings-v2.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo.yaml istio-1.11.3/samples/bookinfo/platform/kube/productpage-nodeport.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-mysql.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-ingress.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-details-v2.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-ratings.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-ratings-v2-mysql.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-ratings-discovery.yaml istio-1.11.3/samples/bookinfo/platform/kube/README.md istio-1.11.3/samples/bookinfo/platform/kube/cleanup.sh istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-db.yaml istio-1.11.3/samples/bookinfo/platform/kube/bookinfo-ratings-v2-mysql-vm.yaml istio-1.11.3/samples/bookinfo/policy/ istio-1.11.3/samples/bookinfo/policy/productpage_envoy_ratelimit.yaml istio-1.11.3/samples/ratelimit/ istio-1.11.3/samples/ratelimit/rate-limit-service.yaml istio-1.11.3/samples/grpc-echo/ istio-1.11.3/samples/grpc-echo/grpc-echo.yaml istio-1.11.3/samples/addons/ istio-1.11.3/samples/addons/kiali.yaml istio-1.11.3/samples/addons/extras/ istio-1.11.3/samples/addons/extras/prometheus-operator.yaml istio-1.11.3/samples/addons/extras/prometheus_vm.yaml istio-1.11.3/samples/addons/extras/zipkin.yaml istio-1.11.3/samples/addons/extras/prometheus_vm_tls.yaml istio-1.11.3/samples/addons/grafana.yaml istio-1.11.3/samples/addons/README.md istio-1.11.3/samples/addons/jaeger.yaml istio-1.11.3/samples/addons/prometheus.yaml istio-1.11.3/samples/external/ istio-1.11.3/samples/external/github.yaml istio-1.11.3/samples/external/aptget.yaml istio-1.11.3/samples/external/README.md istio-1.11.3/samples/external/pypi.yaml istio-1.11.3/samples/custom-bootstrap/ istio-1.11.3/samples/custom-bootstrap/custom-bootstrap.yaml istio-1.11.3/samples/custom-bootstrap/README.md istio-1.11.3/samples/custom-bootstrap/example-app.yaml istio-1.11.3/samples/helloworld/ istio-1.11.3/samples/helloworld/helloworld.yaml istio-1.11.3/samples/helloworld/helloworld-gateway.yaml istio-1.11.3/samples/helloworld/src/ istio-1.11.3/samples/helloworld/src/build_service.sh istio-1.11.3/samples/helloworld/src/requirements.txt istio-1.11.3/samples/helloworld/gen-helloworld.sh istio-1.11.3/samples/helloworld/README.md istio-1.11.3/samples/helloworld/loadgen.sh istio-1.11.3/samples/certs/ istio-1.11.3/samples/certs/workload-bar-key.pem istio-1.11.3/samples/certs/generate-workload.sh istio-1.11.3/samples/certs/root-cert.pem istio-1.11.3/samples/certs/cert-chain-alt.pem istio-1.11.3/samples/certs/ca-cert.pem istio-1.11.3/samples/certs/cert-chain.pem istio-1.11.3/samples/certs/workload-foo-key.pem istio-1.11.3/samples/certs/workload-foo-cert.pem istio-1.11.3/samples/certs/README.md istio-1.11.3/samples/certs/workload-bar-cert.pem istio-1.11.3/samples/certs/root-cert-alt.pem istio-1.11.3/samples/certs/ca-key-alt.pem istio-1.11.3/samples/certs/ca-cert-alt.pem istio-1.11.3/samples/certs/ca-key.pem istio-1.11.3/samples/README.md istio-1.11.3/samples/health-check/ istio-1.11.3/samples/health-check/liveness-http-same-port.yaml istio-1.11.3/samples/health-check/liveness-command.yaml istio-1.11.3/samples/security/ istio-1.11.3/samples/security/psp/ istio-1.11.3/samples/security/psp/sidecar-psp.yaml istio-1.11.3/samples/multicluster/ istio-1.11.3/samples/multicluster/gen-eastwest-gateway.sh istio-1.11.3/samples/multicluster/expose-istiod.yaml istio-1.11.3/samples/multicluster/expose-services.yaml istio-1.11.3/samples/multicluster/README.md istio-1.11.3/samples/multicluster/expose-istiod-https.yaml
转到 istio 包目录
[root@k8s-master app]# cd istio-1.11.3/
将 istioctl 客户端加入搜索路径
[root@k8s-master istio-1.11.3]# export PATH=$PWD/bin:$PATH
安装istio
[root@k8s-master istio-1.11.3]# istioctl install --set profile=demo -y ✔ Istio core installed ✔ Istiod installed - Processing resources for Egress gateways, Ingress gateways. Waiting for Deployment/istio-system/istio-egressgateway, Deployment/istio-system/istio-ingressgateway ✔ Egress gateways installed ✔ Ingress gateways installed ✔ Installation complete Thank you for installing Istio 1.11. Please take a few minutes to tell us about your install/upgrade experience! https://forms.gle/kWULBRjUv7hHci7T6
给命名空间添加标签，指示 Istio 在部署应用的时候，自动注入 Envoy 边车代理
[root@k8s-master istio-1.11.3]# kubectl label namespace default istio-injection=enabled namespace/default labeled
二、检查环境
查看istio相应的 namespace 和 pod 是否已经正常创建
[root@k8s-master istio-1.11.3]# kubectl get ns |grep istio istio-system Active 5m
查看pods
[root@k8s-master istio-1.11.3]# kubectl get pods -n istio-system NAME READY STATUS RESTARTS AGE istio-egressgateway-7ddb45fcdf-kw588 1/1 Running 0 3m57s istio-ingressgateway-f7cdcd7dc-xzglw 1/1 Running 0 3m57s istiod-788ff675dd-pz4mk 1/1 Running 0 5m13s
检查 istio 的 CRD 和 API 资源
[root@k8s-master istio-1.11.3]# kubectl get crd |grep istio authorizationpolicies.security.istio.io 2021-09-28T10:09:42Z destinationrules.networking.istio.io 2021-09-28T10:09:42Z envoyfilters.networking.istio.io 2021-09-28T10:09:42Z gateways.networking.istio.io 2021-09-28T10:09:42Z istiooperators.install.istio.io 2021-09-28T10:09:42Z peerauthentications.security.istio.io 2021-09-28T10:09:42Z requestauthentications.security.istio.io 2021-09-28T10:09:42Z serviceentries.networking.istio.io 2021-09-28T10:09:42Z sidecars.networking.istio.io 2021-09-28T10:09:42Z telemetries.telemetry.istio.io 2021-09-28T10:09:42Z virtualservices.networking.istio.io 2021-09-28T10:09:42Z workloadentries.networking.istio.io 2021-09-28T10:09:42Z workloadgroups.networking.istio.io 2021-09-28T10:09:42Z [root@k8s-master istio-1.11.3]# kubectl api-resources |grep istio istiooperators iop,io install.istio.io/v1alpha1 true IstioOperator destinationrules dr networking.istio.io/v1beta1 true DestinationRule envoyfilters networking.istio.io/v1alpha3 true EnvoyFilter gateways gw networking.istio.io/v1beta1 true Gateway serviceentries se networking.istio.io/v1beta1 true ServiceEntry sidecars networking.istio.io/v1beta1 true Sidecar virtualservices vs networking.istio.io/v1beta1 true VirtualService workloadentries we networking.istio.io/v1beta1 true WorkloadEntry workloadgroups wg networking.istio.io/v1alpha3 true WorkloadGroup authorizationpolicies security.istio.io/v1beta1 true AuthorizationPolicy peerauthentications pa security.istio.io/v1beta1 true PeerAuthentication requestauthentications ra security.istio.io/v1beta1 true RequestAuthentication telemetries telemetry telemetry.istio.io/v1alpha1 true Telemetry
以上k8s+istio的环境搭建完成，接下来记录Istio官方示例应用Bookinfo的部署过程。
~~~未完待续
