oomichi / try-kubernetes

12 stars 5 forks source link

Istio + Envoy on k8s #66

Closed oomichi closed 2 years ago

oomichi commented 5 years ago

コントロールプレーンとして Istio、データプレーンとして Envoy を使うことが Kubernetes のデファクトとなってきたので、IstioのQuick Start を参考に試してみる。

先に LB を環境で実装する必要あり https://github.com/oomichi/try-kubernetes/issues/60

Istio Quick Start: https://istio.io/docs/setup/kubernetes/quick-start/

Kubernetes: v1.12.2 IaaS: OpenStack OS: Ubuntu 16.04 LTS

oomichi commented 5 years ago
$ curl -L https://git.io/getLatestIstio | sh -
...
bin  install  istio.VERSION  LICENSE  README.md  samples  tools
Add /home/ubuntu/istio-1.0.4/bin to your path; e.g copy paste in your shell and/or ~/.profile:
export PATH="$PATH:/home/ubuntu/istio-1.0.4/bin"
$ export PATH="$PATH:/home/ubuntu/istio-1.0.4/bin"
$ ls
istio-1.0.4
$
$ cd istio-1.0.4/
$ kubectl apply -f install/kubernetes/helm/istio/templates/crds.yaml

まずは試しなので "Option 1: Install Istio without mutual TLS authentication between sidecars" で実施

$ kubectl apply -f install/kubernetes/istio-demo.yaml

確認 -> LBがないため、ちゃんとサービスが起動せず

$ kubectl get all -n istio-system
NAME                             TYPE           CLUSTER-IP       EXTERNAL-IP   PORT(S)                                                                                                                   AGE
service/grafana                  ClusterIP      10.100.40.184    <none>        3000/TCP                                                                                                                  2m19s
service/istio-citadel            ClusterIP      10.111.109.121   <none>        8060/TCP,9093/TCP                                                                                                         2m18s
service/istio-egressgateway      ClusterIP      10.104.83.95     <none>        80/TCP,443/TCP                                                                                                            2m20s
service/istio-galley             ClusterIP      10.99.205.25     <none>        443/TCP,9093/TCP                                                                                                          2m20s
service/istio-ingressgateway     LoadBalancer   10.107.178.35    <pending>     80:31380/TCP,443:31390/TCP,31400:31400/TCP,15011:30908/TCP,8060:30823/TCP,853:30694/TCP,15030:31260/TCP,15031:30407/TCP   2m19s
...