{"id":43706,"date":"2023-09-21T16:55:00","date_gmt":"2022-11-29T09:03:06","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/"},"modified":"2024-05-04T00:55:28","modified_gmt":"2024-05-03T16:55:28","slug":"%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/","title":{"rendered":"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e"},"content":{"rendered":"<p>\u8fd9\u7bc7\u5e16\u5b50\u662f2019\u5e74\u5bcc\u58eb\u901a\u5723\u8bde\u65e5\u5386\u6d3b\u52a8\u7684\u7b2c\u5341\u5929\u6587\u7ae0\u3002<br \/>\n\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u8fd9\u7bc7\u6587\u7ae0\u4ec5\u4ee3\u8868\u4e2a\u4eba\u89c2\u70b9\uff0c\u5e76\u4e0d\u4ee3\u8868\u516c\u53f8\u6216\u7ec4\u7ec7\u7684\u7acb\u573a\u3002<\/p>\n<h2>\u6982\u62ec<\/h2>\n<p>\u968f\u7740\u670d\u52a1\u7f51\u683c\u8ba4\u77e5\u7684\u666e\u53ca\uff0c\u5907\u53d7\u5173\u6ce8\u7684\u5f00\u6e90\u8f6f\u4ef6Istio\u6210\u4e3a\u4ee3\u8868\u3002<br \/>\n\u4e00\u65b9\u9762\uff0c\u6211\u4eec\u542c\u5230\u4e86\u60f3\u8981\u5c1d\u8bd5\u4f7f\u7528Istio\u7684\u58f0\u97f3\uff0c\u4f46\u4e5f\u6709\u4eba\u58f0\u79f0Istio\u7684\u7ec4\u4ef6\u592a\u591a\uff0c\u5f04\u4e0d\u61c2\u3002<br \/>\n\u786e\u5b9e\uff0c\u4f5c\u4e3a\u6574\u4f53\u800c\u8a00\uff0cIstio\u975e\u5e38\u5e9e\u5927\u3002<br \/>\n\u7136\u800c\uff0c\u7531\u4e8e\u5404\u4e2a\u7ec4\u4ef6\u4e4b\u95f4\u677e\u6563\u8026\u5408\uff0c\u4e5f\u53ef\u4ee5\u53ea\u5b89\u88c5\u6240\u9700\u7ec4\u4ef6\u3002<br \/>\n\u5728\u8fd9\u7bc7\u6587\u7ae0\u4e2d\uff0c\u6211\u4eec\u5c06\u4e00\u4e00\u5b89\u88c5\u5e76\u5bf9\u5404\u4e2a\u7ec4\u4ef6\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e\u3002<\/p>\n<h2>\u73af\u5883<\/h2>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">MacBook Air<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">CPU: 3, Memory: 8GiB<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Docker Version: 19.03.5<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Kubernetes Version: v1.15.5<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Istio Version: 1.4.1<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Helm Version: v2.12.0<\/ul>\n<p>\u203bKubernetes\u6b63\u5728\u4f7f\u7528Docker for Kubernetes\u3002<\/p>\n<h2>Istio\u7684\u6574\u4f53\u56fe\u666f<\/h2>\n<p>\u9996\u5148\uff0c\u6211\u5c06\u89e3\u91caIstio\u7684\u6574\u4f53\u6846\u67b6\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d542437434c4406cd1d3f\/8-0.png\" alt=\"istio.png\" \/><\/div>\n<p>Istio\u6709\u5927\u81f4\u5982\u4e0a\u6240\u8ff0\u7684\u7ec4\u4ef6\u5b58\u5728\u3002<br \/>\n\u5176\u5927\u6982\u7684\u8fd0\u4f5c\u65b9\u5f0f\u662f\uff0c\u5728\u670d\u52a1\u4e4b\u95f4\u7684\u901a\u4fe1\u4e2d\u6709\u4e00\u4e2a\u540d\u4e3aEnvoy\u7684\u4ee3\u7406\uff0c\u5b83\u5145\u5f53\u7740\u6240\u6709\u901a\u4fe1\uff08\u5165\u7ad9\u548c\u51fa\u7ad9\uff09\u7684\u4e2d\u95f4\u4eba\u3002<br \/>\n\u5728\u670d\u52a1\u4e4b\u95f4\u7684\u901a\u4fe1\u4e2d\uff0cEnvoy\u66ff\u6211\u4eec\u627f\u62c5\u4e86\u4e00\u4e9b\u9ebb\u70e6\u7684\u4e8b\u60c5\uff0c\u6bd4\u5982\u8d85\u65f6\u548c\u6d41\u91cf\u63a7\u5236\u7b49\u3002<br \/>\n\u5176\u4ed6\u7ec4\u4ef6\u5c06\u5728\u540e\u9762\u8fdb\u884c\u8bf4\u660e\uff0c\u4f46\u5b83\u4eec\u4e3b\u8981\u662f\u63a7\u5236\u548c\u6536\u96c6Envoy\u7684\u76f8\u5173\u4fe1\u606f\u3002<br \/>\n\u90a3\u4e48\uff0c\u6211\u4eec\u5c06\u5728\u5b9e\u9645\u5b89\u88c5\u65f6\u8fdb\u884c\u9010\u6b65\u89e3\u91ca\u3002<\/p>\n<p>\u8bf7\u53c2\u8003\u4ee5\u4e0b\u7f51\u5740\uff1ahttps:\/\/istio.io\/docs\/ops\/deployment\/architecture\/<\/p>\n<h2>Istio\u5b89\u88c5\u524d\u7684\u51c6\u5907\u5de5\u4f5c<\/h2>\n<p>\u6211\u6253\u7b97\u4f7f\u7528helm\u547d\u4ee4\u6765\u5b89\u88c5\u7ec4\u4ef6\u3002\u4ee5\u4e0b\u662fhelm\u5b89\u88c5\u548c\u51c6\u5907istio\u6a21\u677f\u7684\u65b9\u6cd5\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>brew <span class=\"nb\">install <\/span>helm\r\n<span class=\"nv\">$ <\/span>helm version\r\n\r\n<span class=\"nv\">$ <\/span>curl <span class=\"nt\">-L<\/span> https:\/\/istio.io\/downloadIstio | sh -\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sudo cp <\/span>istio-1.4.1\/bin\/istioctl \/usr\/local\/bin\r\n<span class=\"nv\">$ <\/span>istioctl version\r\n<\/code><\/pre>\n<p>\u7136\u540e\uff0c\u5b89\u88c5\u7528\u4e8e\u7ec4\u4ef6\u5b89\u88c5\u7684\u524d\u7f6e\u6b65\u9aa4\u7684Namespsce\u548cCRD(Custom Resource Definition)\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl create namespace istio-system\r\n<span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio-init <span class=\"nt\">--name<\/span> istio-init <span class=\"nt\">--namespace<\/span> istio-system | k apply <span class=\"nt\">-f<\/span> -\r\n<\/code><\/pre>\n<h4>\u53c2\u8003: \u4e0b\u9762\u662f\u4e2d\u6587\u7684\u539f\u751f\u91ca\u4e49\uff0c\u53ea\u9700\u8981\u63d0\u4f9b\u4e00\u79cd\u9009\u9879\uff1a<\/h4>\n<p>&#8211; \u53c2\u8003\uff1a<\/p>\n<ul class=\"post-ul\">helm\u3067\u306e\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7: https:\/\/istio.io\/docs\/setup\/install\/helm\/<\/ul>\n<h2>\u6838\u5fc3\u7ec4\u4ef6<\/h2>\n<h3>\u98de\u884c\u5458<\/h3>\n<p>Pilot\u662f\u4e00\u4e2a\u7528\u4e8e\u5c06\u7528\u6237\u5728Kubernetes\u4e2d\u8bbe\u7f6e\u7684CRD\uff08\u81ea\u5b9a\u4e49\u8d44\u6e90\u5b9a\u4e49\uff09\u7684\u503c\u4f20\u9012\u7ed9Envoy\u7684\u7ec4\u4ef6\u3002\u901a\u8fc7\u8fd9\u4e2a\u7ec4\u4ef6\uff0c\u53ef\u4ee5\u89e3\u6790DestinationRule\u548cVirtualService\u7b49\u8d44\u6e90\uff0c\u5e76\u5c06\u5176\u53cd\u6620\u4e3aEnvoy\u7684\u914d\u7f6e\u3002<\/p>\n<h4>\u901a\u8fc7\u5b89\u88c5Pilot\uff0c\u53ef\u4ee5\u5b9e\u73b0\u7684\u64cd\u4f5c\u3002<\/h4>\n<p>\u53ef\u4ee5\u5b9e\u73b0\u8d1f\u8f7d\u5747\u8861\u548c\u6839\u636e\u7279\u5b9a\u7248\u672c\u53d1\u9001\u8bf7\u6c42\u7684\u6d41\u91cf\u7ba1\u7406\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Traffic Management\u4e00\u89a7<\/ul>\n<\/li>\n<\/ul>\n<p>\u7279\u5b9a\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u307f\u3078\u306e\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0<br \/>\nFault Injection(\u5f37\u5236\u7684\u306bInternal Server Error\u3092\u8fd4\u3059\u306a\u3069)<br \/>\n\u30ea\u30af\u30a8\u30b9\u30c8\u306btimeout\u3092\u8a2d\u5b9a<br \/>\nCircuit Breaking<\/p>\n<h4>\u90e8\u7f72\u6307\u4ee4<\/h4>\n<p>\u672c\u6b21\uff0c\u6211\u4eec\u51c6\u5907\u4e86helm\u7684value\u6587\u4ef6\uff0c\u5e76\u4e14\u4f7f\u7528template\u547d\u4ee4\u4ece\u90a3\u91cc\u5f00\u59cb\u521b\u5efakubernetes\u7684yaml\u6587\u4ef6\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>vi values-pilot.yaml\r\n  <span class=\"c\"># \u203b\u4e0b\u8a18\u53c2\u7167<\/span>\r\n<span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-pilot.yaml <span class=\"o\">&gt;<\/span> pilot.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> pilot.yaml\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"na\">pilot<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">sidecar<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">gateways<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">security<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">sidecarInjectorWebhook<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">galley<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">mixer<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">policy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n  <span class=\"na\">telemetry<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">prometheus<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"c1\"># Common settings.<\/span>\r\n<span class=\"na\">global<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">proxy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">envoyStatsd<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n  <span class=\"na\">useMCP<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n<\/code><\/pre>\n<h4>\u8003\u8bd5 sh\u00ec)<\/h4>\n<p>\u8fd9\u4e2a\u6d4b\u8bd5\u5e94\u7528\u7a0b\u5e8f\u5c06\u4f7f\u7528BookInfo\u3002\u6211\u60f3\u5728\u8fd9\u6b21\u53ea\u53d1\u9001\u6240\u6709\u8bf7\u6c42\u5230v1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>vi istio-1.4.1\/samples\/bookinfo\/platform\/kube\/bookinfo.yaml\r\n  <span class=\"c\"># \u3068\u308a\u3042\u3048\u305a\u30a2\u30af\u30bb\u30b9\u3059\u308b\u305f\u3081\u306bProductpage\u306eService\u3092NodePort\u306b\u3057\u307e\u3059(\u4e0b\u8a18\u53c2\u7167)<\/span>\r\n<span class=\"nv\">$ <\/span>istioctl kube-inject <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/platform\/kube\/bookinfo.yaml | kubectl apply <span class=\"nt\">-f<\/span> -\r\n<span class=\"nv\">$ <\/span>kubectl get pods\r\nNAME                              READY   STATUS    RESTARTS   AGE\r\ndetails-v1-5c76c87c6-5w2pr        2\/2     Running   0          4m53s\r\nproductpage-v1-7bc5cb86bd-9srfr   2\/2     Running   0          4m50s\r\nratings-v1-5597f5d56d-zr225       2\/2     Running   0          4m51s\r\nreviews-v1-67b6db665d-48968       2\/2     Running   0          4m52s\r\nreviews-v2-5f78d5fdf9-zvcff       2\/2     Running   0          4m52s\r\nreviews-v3-69f68ff8bd-fxsfc       2\/2     Running   0          4m52s\r\n\r\n<span class=\"c\"># \u52d5\u4f5c\u3057\u3066\u3044\u308b\u304b\u30d6\u30e9\u30a6\u30b6\u304b\u3089\u78ba\u8a8d(http:\/\/localhost:30000\/productpage)<\/span>\r\n<span class=\"c\"># \u4f55\u5ea6\u304b\u66f4\u65b0\u3059\u308b\u3068\u30ec\u30d3\u30e5\u30fc\u306e\u661f\u304c\u9ed2\u3084\u8d64\u3084\u7121\u304f\u306a\u3063\u305f\u308a\u3059\u308b\u306f\u305a\u3067\u3059<\/span>\r\n\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/networking\/destination-rule-all.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/networking\/virtual-service-all-v1.yaml\r\n\r\n<span class=\"c\"># \u30d6\u30e9\u30a6\u30b6\u304b\u3089\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068review\u306e\u661f\u304c\u306a\u3044\u72b6\u614b\u3057\u304b\u8868\u793a\u3055\u308c\u306a\u304f\u306a\u308b<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"c1\"># 240\u884c\u76ee\u4ed8\u8fd1<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Service<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n  <span class=\"na\">labels<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n    <span class=\"na\">service<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">NodePort<\/span>\r\n  <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"pi\">-<\/span> <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">9080<\/span>\r\n    <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">http<\/span>\r\n    <span class=\"na\">nodePort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">30000<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n<span class=\"nn\">---<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<p>\u6211\u8ba4\u4e3a\u7531\u4e8ePod\u4f7f\u7528Envoy\u542f\u52a8\uff0c\u6240\u4ee5\u53ef\u4ee5\u786e\u8ba4READY\u72b6\u6001\u4e3a2\/2\u3002<br \/>\n\u6b64\u5916\uff0c\u6211\u8ba4\u4e3a\u53ef\u4ee5\u786e\u8ba4\u53ea\u80fd\u8def\u7531\u5230\u7279\u5b9a\u7248\u672c\u3002<\/p>\n<h4>\u8bf7\u53c2\u8003\uff1a<\/h4>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Traffic Management: https:\/\/istio.io\/docs\/tasks\/traffic-management\/<\/ul>\n<\/li>\n<\/ul>\n<p>BookInfo\u30a2\u30d7\u30ea: https:\/\/istio.io\/docs\/examples\/bookinfo\/<\/p>\n<h3>\u653f\u7b56<\/h3>\n<p>Policy\u662fMixer\u7684\u4e00\u4e2a\u7ec4\u4ef6\uff0c\u7528\u4e8e\u4e3aEnvoy\u8bbe\u7f6e\u8bbf\u95ee\u7b56\u7565\uff0c\u5305\u62ec\u6d41\u91cf\u63a7\u5236\u548c\u9ed1\u540d\u5355\/\u767d\u540d\u5355\u7684\u8bbf\u95ee\u63a7\u5236\u3002<\/p>\n<h4>\u90e8\u7f72\u6307\u4ee4<\/h4>\n<p>\u6211\u5011\u5c07\u5148\u524d\u7684values-pilot.yaml\u6587\u4ef6\u4e2d\u7684policy\u9805\u76ee\u8a2d\u7f6e\u70baenable\u3002<br \/>\n\u540c\u6642\uff0c\u5c07disablePolicyChecks\u8a2d\u7f6e\u70bafalse\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">mixer<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">policy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">telemetry<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">global<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">disablePolicyChecks<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-policy.yaml <span class=\"o\">&gt;<\/span> policy.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> policy.yaml\r\n<\/code><\/pre>\n<h4>\u8003\u8bd5 sh\u00ec)<\/h4>\n<p>\u6211\u5011\u9019\u6b21\u5c07\u901a\u904e\u9ed1\u540d\u55ae\u7981\u6b62\u5c0dhelloworld\u670d\u52d9\u7684v3\u7248\u672c\uff08\u8a55\u8ad6\u661f\u661f\u70ba\u7d05\u8272\uff09\u9032\u884c\u8a2a\u554f\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c\"># all-v1\u306e\u30eb\u30fc\u30eb\u306f\u524a\u9664\u3057\u3066\u304a\u304d\u307e\u3059<\/span>\r\n<span class=\"nv\">$ <\/span>kubectl delete <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/networking\/virtual-service-all-v1.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/policy\/mixer-rule-deny-label.yaml\r\n\r\n<span class=\"c\"># \u30d6\u30e9\u30a6\u30b6\u3092\u66f4\u65b0\u3057\u7d9a\u3051\u308b\u3068\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u304f\u306a\u3063\u3066\u3044\u308b\u306e\u304c\u78ba\u8a8d\u3067\u304d\u308b\u3068\u601d\u3044\u307e\u3059<\/span>\r\n<span class=\"c\"># Ratings service is currently unavailable<\/span>\r\n<\/code><\/pre>\n<h3>\u9065\u6d4b<\/h3>\n<p>\u9065\u6d4b\uff08Telemetry\uff09\u4e5f\u662fMixer\u7684\u4e00\u90e8\u5206\uff0c\u5b83\u4eceEnvoy\u6536\u96c6\u6307\u6807\u548c\u65e5\u5fd7\u4fe1\u606f\u3002\u6536\u96c6\u5230\u7684\u6570\u636e\u901a\u8fc7Mixer\u9002\u914d\u5668\u53d1\u9001\u5230\u8fde\u63a5\u7684\u540e\u7aef\uff0c\u4f8b\u5982Prometheus\u548cDatadog\u3002\u9002\u914d\u5668\u7684\u4f5c\u7528\u662f\u5c06istio\u7684\u6570\u636e\u683c\u5f0f\u8f6c\u6362\u4e3a\u5404\u4e2a\u540e\u7aef\u7684\u6570\u636e\u683c\u5f0f\uff0c\u4f8b\u5982\uff0cPrometheus\u9002\u914d\u5668\u4f1a\u5c06\u4eceEnvoy\u6536\u96c6\u7684\u6307\u6807\u8f6c\u6362\u4e3aPrometheus\u7684\u683c\u5f0f\u5e76\u53d1\u9001\u3002\u4f60\u4e5f\u53ef\u4ee5\u81ea\u5df1\u5236\u4f5c\u9002\u914d\u5668\uff0c\u4ee5\u5c06\u6570\u636e\u53d1\u9001\u5230\u4efb\u610f\u540e\u7aef\u3002<\/p>\n<h4>\u90e8\u7f72\u6307\u4ee4<\/h4>\n<p>\u8fd9\u6b21\u6211\u4eec\u4e5f\u4f1a\u50cf\u4e4b\u524d\u4e00\u6837\u521b\u5efavalues\u6587\u4ef6\u3002<br \/>\n\u203b\u7531\u4e8e\u9065\u6d4b\u901a\u5e38\u6709\u975e\u5e38\u591a\u7684\u8d44\u6e90\u8bf7\u6c42\uff0c\u9ed8\u8ba4\u8fdb\u884c\u4e86\u51cf\u5c11\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">mixer<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">policy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">telemetry<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n    <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">requests<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">cpu<\/span><span class=\"pi\">:<\/span> <span class=\"s\">200m<\/span>\r\n        <span class=\"na\">memory<\/span><span class=\"pi\">:<\/span> <span class=\"s\">500Mi<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-telemetry.yaml <span class=\"o\">&gt;<\/span> telemetry.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> telemetry.yaml\r\n<\/code><\/pre>\n<h4>\u8003\u8bd5 sh\u00ec)<\/h4>\n<p>\u6211\u8ba4\u4e3a\u6700\u7b80\u5355\u6613\u61c2\u7684\u4f7f\u7528\u65b9\u6cd5\u662f\u5c06\u4fe1\u606f\u53d1\u9001\u5230Prometheus\uff0c\u6240\u4ee5\u987a\u4fbf\u4e5f\u8bd5\u7740\u5b89\u88c5Prometheus\u3002<br \/>\n\u6211\u5c06\u901a\u8fc7\u4fee\u6539 values-telemetry.yaml \u6587\u4ef6\u5c06 Prometheus \u8bbe\u7f6e\u4e3a\u5f00\u542f\u72b6\u6001\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">prometheus<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">service<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">nodePort<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">security<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<p>\u5f53\u60a8\u8bbf\u95eehttp:\/\/localhost:32090\u65f6\uff0c\u60a8\u5e94\u8be5\u80fd\u591f\u770b\u5230Prometheus\u7684\u7528\u6237\u754c\u9762\uff0c\u5e76\u786e\u8ba4\u53ef\u4ee5\u83b7\u53d6\u5230\u5ea6\u91cf\u4fe1\u606f\u3002<\/p>\n<h3>\u5165\u53e3\/\u51fa\u53e3\u7f51\u5173<\/h3>\n<p>\u9996\u5148\uff0cIngress Gateway\u662f\u7528\u4e8e\u63a7\u5236\u5916\u90e8\u4e0e\u96c6\u7fa4\u4e4b\u95f4\u901a\u4fe1\u7684\u7ec4\u4ef6\u3002<br \/>\n\u7c7b\u4f3c\u4e8eKubernetes\u7684Ingress Controller\uff08\u90fd\u7528\u4e8e\u63a7\u5236L7\u901a\u4fe1\uff09\uff0c\u4f46Istio Ingress Gateway\u53ef\u4ee5\u8fdb\u884c\u66f4\u8be6\u7ec6\u7684\u914d\u7f6e\u3002<br \/>\nEgress Gateway\u5219\u662f\u63a7\u5236\u96c6\u7fa4\u5185\u5411\u5916\u90e8\u7684\u901a\u4fe1\u7684\u7ec4\u4ef6\u3002<br \/>\n\u672c\u6b21\u53ea\u4ecb\u7ecdIngress Gateway\u3002<\/p>\n<h4>\u90e8\u7f72\u6307\u4ee4<\/h4>\n<p>\u6211\u5011\u5c07\u5f9e\u4e4b\u524d\u7684values-telemetry.yaml\u6587\u4ef6\u4e2d\u8a2d\u7f6egateways\u7684\u9805\u76ee\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">gateways<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">istio-ingressgateway<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">autoscaleEnabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n    <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">requests<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">cpu<\/span><span class=\"pi\">:<\/span> <span class=\"s\">10m<\/span>\r\n        <span class=\"na\">memory<\/span><span class=\"pi\">:<\/span> <span class=\"s\">40Mi<\/span>\r\n\r\n  <span class=\"na\">istio-egressgateway<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-gateways.yaml <span class=\"o\">&gt;<\/span> gateways.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> gateways.yaml\r\n<\/code><\/pre>\n<h4>\u8003\u8bd5<\/h4>\n<p>\u9996\u5148\uff0c\u6211\u4eec\u4f1a\u5220\u9664\u5148\u524d\u8bbe\u7f6e\u7684bookinfo\u7684NodePort\u914d\u7f6e\uff0c\u56e0\u4e3a\u5b83\u4e0d\u518d\u9700\u8981\u3002<br \/>\n\u7136\u540e\uff0c\u6211\u4eec\u4f1a\u90e8\u7f72\u9002\u7528\u4e8eIstio IngressGateway\u7684\u8d44\u6e90\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>vi istio-1.4.1\/samples\/bookinfo\/platform\/kube\/bookinfo.yaml\r\n<span class=\"c\"># \u203b\u4e0b\u8a18\u53c2\u7167<\/span>\r\n<span class=\"nv\">$ <\/span>istioctl kube-inject <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/platform\/kube\/bookinfo.yaml | kubectl apply <span class=\"nt\">-f<\/span> -\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/networking\/bookinfo-gateway.yaml\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"c1\"># 240\u884c\u76ee\u4ed8\u8fd1<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Service<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n  <span class=\"na\">labels<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n    <span class=\"na\">service<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"pi\">-<\/span> <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">9080<\/span>\r\n    <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">http<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">productpage<\/span>\r\n<span class=\"nn\">---<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<p>\u6700\u540e\uff0c\u6211\u4eec\u5c06\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95eehttp:\/\/localhost\/productpage\uff08istio-ingressgateway\u7684\u670d\u52a1\u5730\u5740\uff09\u3002<\/p>\n<h3>\u57ce\u5821<\/h3>\n<p>Citadel\u662fIstio\u7684\u5b89\u5168\u7ec4\u4ef6\u3002<br \/>\nIstio\u6709\u4ee5\u4e0b\u4e24\u4e2a\u5b89\u5168\u529f\u80fd\uff1a<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Mutual TLS(\u76f8\u4e92\u8a8d\u8a3c)<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Istio RBAC(Role Based Access Control)<\/ul>\n<h4>\u4e92\u76f8\u9a8c\u8bc1<\/h4>\n<p>\u5728SSL\u670d\u52a1\u7b49\u5e38\u89c4https\u7684\u60c5\u51b5\u4e0b\uff0c\u8ba4\u8bc1\u662f\u6307\u5ba2\u6237\u7aef\u5bf9\u670d\u52a1\u5668\u7684\u8eab\u4efd\u8fdb\u884c\u9a8c\u8bc1\u3002<br \/>\n\u800c\u5728\u4e92\u76f8\u8ba4\u8bc1\u4e2d\uff0c\u5ba2\u6237\u7aef\u5728\u8ba4\u8bc1\u670d\u52a1\u5668\u7684\u540c\u65f6\uff0c\u670d\u52a1\u5668\u4e5f\u4f1a\u5bf9\u5ba2\u6237\u7aef\u7684\u8eab\u4efd\u8fdb\u884c\u9a8c\u8bc1\u3002<br \/>\n\u901a\u8fc7\u8fd9\u79cd\u65b9\u5f0f\uff0c\u53ef\u4ee5\u786e\u4fdd\u5728\u670d\u52a1\u4e4b\u95f4\u8fdb\u884c\u5b89\u5168\u7684\u901a\u4fe1\u3002<br \/>\n\u901a\u5e38\u9700\u8981SSL\u8bc1\u4e66\u8fdb\u884c\u8ba4\u8bc1\u3002<br \/>\n\u8bc1\u4e66\u7684\u53d1\u884c\u548c\u7ba1\u7406\u7b49\u5904\u7406\u662f\u76f8\u5f53\u590d\u6742\u7684\uff0c\u4f46\u5728Istio\u4e2d\uff0cCitadel\u4f1a\u8d1f\u8d23\u7ba1\u7406\u6240\u6709\u8fd9\u4e9b\u8bc1\u4e66\u3002<\/p>\n<h4>Istio \u8bbf\u95ee\u63a7\u5236<\/h4>\n<p>Istio RBAC\u662fIstio\u8bbf\u95ee\u63a7\u5236\u529f\u80fd\u4e4b\u4e00\u3002<br \/>\n\u7c7b\u4f3c\u4e8eKubernetes\u7684RBAC\uff0c\u53ef\u4ee5\u7528\u4e8e\u63a7\u5236\u670d\u52a1\u4e4b\u95f4\u7684\u901a\u4fe1\u8bbf\u95ee\u3002(k8s\u7528\u4e8e\u8d44\u6e90\u8bbf\u95ee\u63a7\u5236)<br \/>\n\u4f8b\u5982\uff0c\u53ef\u4ee5\u8bbe\u7f6e\u53ea\u5141\u8bb8\u7528\u6237A\u8bbf\u95eeserviceA\u7684GET \/path\u63a5\u53e3\u3002<\/p>\n<h4>\u5c71\u5be8\u5821\u53ef\u4ee5\u505a\u7684\u4e8b\u60c5\u3002<\/h4>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30b5\u30fc\u30d3\u30b9\u9593(Envoy\u9593)\u901a\u4fe1\u306e\u6697\u53f7\u5316<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u901a\u4fe1\u5148\u306e\u8a8d\u8a3c(\u203bk8s Cluster\u5916\u30b5\u30fc\u30d3\u30b9\u3092\u9664\u304f)<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Role\u306b\u3088\u308b\u901a\u4fe1\u306e\u8a8d\u53ef<\/ul>\n<p>\u5982\u679c\u60a8\u60f3\u8981\u66f4\u8be6\u7ec6\u5730\u4e86\u89e3k8s\u3001istio\u7684\u5b89\u5168\u6027\u65b9\u9762\u7684\u95ee\u9898\uff0c\u8bf7\u52a1\u5fc5\u53c2\u8003\u6211\u7684GitHub(https:\/\/github.com\/sh-miyoshi\/sectest)\u3002<\/p>\n<h4>\u90e8\u7f72\u6d41\u7a0b<\/h4>\n<p>\u6211\u5c06\u6253\u5f00\u5148\u524d\u7684values-gateways.yaml\u4e2d\u6709\u5173Citadel\u90e8\u5206\u7684\u9879\u76ee\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">security<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">global<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">disablePolicyChecks<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n  <span class=\"na\">proxy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">envoyStatsd<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n  <span class=\"na\">useMCP<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n  <span class=\"na\">mlts<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-citadel.yaml <span class=\"o\">&gt;<\/span> citadel.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> citadel.yaml\r\n<\/code><\/pre>\n<h4>\u8003\u8bd5<\/h4>\n<p>\u70ba\u4e86\u5916\u89c0\u7684\u4e00\u81f4\u6027\uff0c\u672c\u6b21\u5c07\u7701\u7565\u3002\u8acb\u6ce8\u610f\uff0c\u5728\u95dc\u9589\u5b89\u5168\u6a21\u5f0f\u5f8c\uff0c\u8acb\u5148\u522a\u9664\u5df2\u5efa\u7acb\u7684bookinfo\u61c9\u7528\uff0c\u7136\u5f8c\u518d\u91cd\u65b0\u90e8\u7f72\u3002\u6709\u95dc\u6e2c\u8a66\u65b9\u6cd5\u7b49\uff0c\u8acb\u53c3\u8003\u6211\u7684GitHub\uff08https:\/\/github.com\/sh-miyoshi\/sectest\uff09\u3002<\/p>\n<h3>\u4fa7\u8f66\u6ce8\u5165\u5668<\/h3>\n<p>Sidecar Injector\u662f\u4e00\u500b\u7d44\u4ef6\uff0c\u5b83\u53ef\u4ee5\u6aa2\u6e2cPod\u7684\u555f\u52d5\u4e26\u81ea\u52d5\u63d2\u5165Envoy\uff08istio-proxy\uff09\u3002<br \/>\n\u4ee5\u524d\uff0c\u6211\u5011\u9700\u8981\u4f7f\u7528istioctl kube-inject\u547d\u4ee4\u4f86\u5275\u5efa\u4e00\u500b\u63d2\u5165Envoy\uff08istio-proxy\uff09\u7684YAML\u6587\u4ef6\uff0c\u7136\u5f8c\u4f7f\u7528kubectl apply\u547d\u4ee4\u4f86\u90e8\u7f72\u5b83\u3002<br \/>\n\u6709\u4e86\u9019\u500b\u7d44\u4ef6\uff0c\u5b83\u53ef\u4ee5\u81ea\u52d5\u63d2\u5165\uff0c\u975e\u5e38\u65b9\u4fbf\u3002<\/p>\n<h4>\u90e8\u7f72\u6307\u4ee4<\/h4>\n<p>\u6211\u4f1a\u4ece\u4e4b\u524d\u7684values-citadel.yaml\u6587\u4ef6\u4e2d\u5c06sidecarInjectorWebhook\u7684\u9879\u76ee\u8bbe\u7f6e\u4e3aenable\u3002<br \/>\n*\u5728\u6211\u7684\u73af\u5883\u4e2d\uff0c\u5982\u679c\u6ca1\u6709\u542f\u7528Citadel\uff0c\u65e0\u6cd5\u542f\u52a8\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">sidecarInjectorWebhook<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-injector.yaml <span class=\"o\">&gt;<\/span> injector.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> injector.yaml\r\n<\/code><\/pre>\n<h4>\u4f7f\u7528\u65b9\u6cd5<\/h4>\n<p>\u53ea\u9700\u4e3aauto inject\u7684\u547d\u540d\u7a7a\u95f4\u6dfb\u52a0\u6807\u7b7e\uff0c\u7136\u540e\u4f7f\u7528kubectl\u547d\u4ee4\u90e8\u7f72\u5373\u53ef\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c\"># \u4e00\u65e6\u524a\u9664<\/span>\r\n<span class=\"nv\">$ <\/span>.\/istio-1.4.1\/samples\/bookinfo\/platform\/kube\/cleanup.sh\r\n<span class=\"nv\">$ <\/span>kubectl label namespace default istio-injection<span class=\"o\">=<\/span>enabled\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> istio-1.4.1\/samples\/bookinfo\/platform\/kube\/bookinfo.yaml\r\n<span class=\"nv\">$ <\/span>kubectl get pods\r\nNAME                              READY   STATUS    RESTARTS   AGE\r\ndetails-v1-74f858558f-krpqv       2\/2     Running   0          3m36s\r\nproductpage-v1-8554d58bff-2l57q   2\/2     Running   0          3m33s\r\nratings-v1-7855f5bcb9-xzcvc       2\/2     Running   0          3m36s\r\nreviews-v1-59fd8b965b-7nm8r       2\/2     Running   0          3m34s\r\nreviews-v2-d6cfdb7d6-kdmg2        2\/2     Running   0          3m35s\r\nreviews-v3-75699b5cfb-86tqh       2\/2     Running   0          3m35s\r\n<\/code><\/pre>\n<h3>\u8231<\/h3>\n<p>\u542c\u8bf4\u8fd9\u4e2a\u7ec4\u4ef6\u53ef\u4ee5\u5e2e\u52a9\u7528\u6237\u6267\u884c\u81ea\u5b9a\u4e49\u7684Istio\u8bbe\u7f6e\u9a8c\u8bc1\u3002<\/p>\n<blockquote><p>\u4e0d\u597d\u610f\u601d\uff0c\u6211\u5bf9Galley\u7684\u4e86\u89e3\u4e0d\u662f\u5f88\u8be6\u7ec6\uff0c\u65e0\u6cd5\u5177\u4f53\u89e3\u91ca\u4f1a\u53d1\u751f\u4ec0\u4e48&#8230;&#8230;<\/p><\/blockquote>\n<h2>\u9644\u52a0\u7ec4\u4ef6<\/h2>\n<p>\u6700\u540e\uff0c\u6211\u4f1a\u4ecb\u7ecd\u4e00\u4e9b\u4f3c\u4e4e\u4f1a\u6709\u7528\u7684istio\u6838\u5fc3\u7ec4\u4ef6\uff0c\u4f46\u4e0d\u5305\u62ec\u6838\u5fc3\u90e8\u5206\u3002<\/p>\n<h3>\u8ffd\u6eaf<\/h3>\n<p>\u57fa\u672c\u6765\u8bf4\uff0c\u5b83\u53ef\u4ee5\u5e2e\u52a9\u4f60\u5f15\u5165Jaeger\u6216zipkin\u7b49\u5206\u5e03\u5f0f\u8ffd\u8e2a\u5de5\u5177\u3002\u4f60\u53ef\u4ee5\u77e5\u9053\u5728\u591a\u4e2a\u670d\u52a1\u4e4b\u95f4\u7684\u901a\u4fe1\u4e2d\uff0c\u6bcf\u4e2a\u90e8\u5206\u82b1\u8d39\u4e86\u591a\u957f\u65f6\u95f4\u3002<\/p>\n<h4>\u90e8\u7f72\u6307\u4ee4<\/h4>\n<p>\u8bf7\u6309\u7167\u4ee5\u5f80\u4fee\u6539values\u6587\u4ef6\uff0c\u5e76\u4f7f\u7528helm\u547d\u4ee4\u8fdb\u884c\u90e8\u7f72\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">tracing<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">service<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">LoadBalancer<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-tracing.yaml <span class=\"o\">&gt;<\/span> tracing.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> tracing.yaml\r\n<\/code><\/pre>\n<h4>\u786e\u8ba4\u6b65\u9aa4<\/h4>\n<p>\u5f53\u60a8\u8bbf\u95ee http:\/\/localhost:(node-port) \uff0c\u5c06\u80fd\u591f\u770b\u5230Jaeger\u7684\u4eea\u8868\u76d8\u3002<br \/>\n\u8bf7\u5c1d\u8bd5\u53d1\u9001\u4e00\u4e9b\u8bf7\u6c42\u5e76\u67e5\u770b\u6570\u636e\u3002\u60a8\u53ef\u4ee5\u4f7f\u7528\u7c7b\u4f3c\u4e8e kubectl get svc -n istio-system tracing -o json | jq .spec.ports[0].nodePort \u7684\u547d\u4ee4\u6765\u83b7\u53d6 node-port \u4fe1\u606f\u3002<\/p>\n<h3>Kiali \u51ef\u5229<\/h3>\n<p>Kiali\u662f\u4e00\u4e2a\u7528\u4e8e\u53ef\u89c6\u5316\u5fae\u670d\u52a1\u4e2d\u53d1\u751f\u7684\u60c5\u51b5\u7684\u56fe\u5f62\u7528\u6237\u754c\u9762(GUI)\u7ec4\u4ef6\u3002<br \/>\n\u5728Web UI\u754c\u9762\u4e0a\uff0c\u60a8\u53ef\u4ee5\u901a\u8fc7Kiali\u76f4\u89c2\u5730\u786e\u8ba4\u54ea\u4e9b\u670d\u52a1\u6b63\u5728\u901a\u4fe1\uff0c\u4ee5\u53ca\u5b83\u4eec\u76ee\u524d\u7684\u72b6\u6001\u3002<\/p>\n<h4>\u90e8\u7f72\u6307\u4ee4<\/h4>\n<p>\u8bf7\u50cf\u4e4b\u524d\u4e00\u6837\u4fee\u6539values\u6587\u4ef6\uff0c\u5e76\u4f7f\u7528helm\u547d\u4ee4\u8fdb\u884c\u90e8\u7f72\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<span class=\"na\">kiali<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">createDemoSecret<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n<span class=\"c1\"># \u30fb\u30fb\u30fb(\u7701\u7565)<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm template istio-1.4.1\/install\/kubernetes\/helm\/istio <span class=\"nt\">--name<\/span> istio <span class=\"nt\">--namespace<\/span> istio-system <span class=\"nt\">--values<\/span> values-kiali.yaml <span class=\"o\">&gt;<\/span> kiali.yaml\r\n<span class=\"nv\">$ <\/span>kubectl apply <span class=\"nt\">-f<\/span> kiali.yaml\r\n<\/code><\/pre>\n<h4>\u786e\u8ba4\u7684\u65b9\u5f0f<\/h4>\n<p>\u7531\u4e8eKiali\u6ca1\u6709\u4f7f\u7528NodePort\u6216LoadBalancer\u6765\u8bbf\u95ee\u7684\u65b9\u5f0f\uff0c\u6240\u4ee5\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528kubectl port-forward\u547d\u4ee4\u6765\u8fdb\u884c\u8bbf\u95ee\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl <span class=\"nt\">-n<\/span> istio-system port-forward <span class=\"si\">$(<\/span>kubectl <span class=\"nt\">-n<\/span> istio-system get pod <span class=\"nt\">-l<\/span> <span class=\"nv\">app<\/span><span class=\"o\">=<\/span>kiali <span class=\"nt\">-o<\/span> <span class=\"nv\">jsonpath<\/span><span class=\"o\">=<\/span><span class=\"s1\">'{.items[0].metadata.name}'<\/span><span class=\"si\">)<\/span> 20001:20001\r\n<\/code><\/pre>\n<p>\u5f53\u4f60\u8bbf\u95eehttp:\/\/localhost:20001\u65f6\uff0c\u4f60\u5c06\u80fd\u591f\u770b\u5230\u5404\u79cd\u4e0d\u540c\u7684\u56fe\u8868\u3002<br \/>\n\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c\u767b\u5f55\u4fe1\u606f\u4e3aadmin\/admin\u3002\uff08\u203b\u5982\u679ccreateDemoSecret\u4e3atrue\uff09<\/p>\n<h2>\u603b\u7ed3<\/h2>\n<p>Istio\u6574\u4f53\u4e0a\u5f88\u5e9e\u5927\uff0c\u4f46\u6bcf\u4e2a\u7ec4\u4ef6\u90fd\u662f\u72ec\u7acb\u7684\uff0c\u60a8\u53ef\u4ee5\u6839\u636e\u9700\u8981\u8fdb\u884c\u5b89\u88c5\u3002<br \/>\n\u672c\u6b21\u4ecb\u7ecd\u4e86\u9010\u4e2a\u7ec4\u4ef6\u8fdb\u884c\u5b89\u88c5\u7684\u6b65\u9aa4\u3002<br \/>\n\u5982\u679c\u672c\u6587\u5bf9\u60a8\u7406\u89e3Istio\u6709\u6240\u5e2e\u52a9\uff0c\u6211\u5c06\u611f\u5230\u975e\u5e38\u8363\u5e78\u3002<\/p>\n<h2>\u989d\u5916\u7684\u4e1c\u897f<\/h2>\n<p>\u6700\u7ec8\u7684values.yaml\u6587\u4ef6<\/p>\n<pre class=\"post-pre\"><code><span class=\"na\">pilot<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">sidecar<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">gateways<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">istio-ingressgateway<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">autoscaleEnabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n    <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">requests<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">cpu<\/span><span class=\"pi\">:<\/span> <span class=\"s\">10m<\/span>\r\n        <span class=\"na\">memory<\/span><span class=\"pi\">:<\/span> <span class=\"s\">40Mi<\/span>\r\n\r\n  <span class=\"na\">istio-egressgateway<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">security<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n\r\n<span class=\"na\">sidecarInjectorWebhook<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n\r\n<span class=\"na\">galley<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n\r\n<span class=\"na\">mixer<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">policy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">telemetry<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n    <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">requests<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">cpu<\/span><span class=\"pi\">:<\/span> <span class=\"s\">200m<\/span>\r\n        <span class=\"na\">memory<\/span><span class=\"pi\">:<\/span> <span class=\"s\">500Mi<\/span>\r\n\r\n<span class=\"na\">prometheus<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">service<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">nodePort<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">security<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n\r\n<span class=\"c1\"># Common settings.<\/span>\r\n<span class=\"na\">global<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">disablePolicyChecks<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n  <span class=\"na\">proxy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">envoyStatsd<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n  <span class=\"na\">useMCP<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">mlts<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n\r\n<span class=\"na\">tracing<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">service<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">NodePort<\/span>\r\n\r\n<span class=\"na\">kiali<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">createDemoSecret<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u8fd9\u7bc7\u5e16\u5b50\u662f2019\u5e74\u5bcc\u58eb\u901a\u5723\u8bde\u65e5\u5386\u6d3b\u52a8\u7684\u7b2c\u5341\u5929\u6587\u7ae0\u3002 \u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u8fd9\u7bc7\u6587\u7ae0\u4ec5\u4ee3\u8868\u4e2a\u4eba\u89c2\u70b9\uff0c\u5e76\u4e0d\u4ee3\u8868\u516c\u53f8\u6216\u7ec4\u7ec7 [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-43706","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e\" \/>\n<meta property=\"og:description\" content=\"\u8fd9\u7bc7\u5e16\u5b50\u662f2019\u5e74\u5bcc\u58eb\u901a\u5723\u8bde\u65e5\u5386\u6d3b\u52a8\u7684\u7b2c\u5341\u5929\u6587\u7ae0\u3002 \u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u8fd9\u7bc7\u6587\u7ae0\u4ec5\u4ee3\u8868\u4e2a\u4eba\u89c2\u70b9\uff0c\u5e76\u4e0d\u4ee3\u8868\u516c\u53f8\u6216\u7ec4\u7ec7 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-29T09:03:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-03T16:55:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d542437434c4406cd1d3f\/8-0.png\" \/>\n<meta name=\"author\" content=\"\u9038, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u9038, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/\",\"name\":\"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2022-11-29T09:03:06+00:00\",\"dateModified\":\"2024-05-03T16:55:28+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\",\"name\":\"\u9038, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"caption\":\"\u9038, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e","og_description":"\u8fd9\u7bc7\u5e16\u5b50\u662f2019\u5e74\u5bcc\u58eb\u901a\u5723\u8bde\u65e5\u5386\u6d3b\u52a8\u7684\u7b2c\u5341\u5929\u6587\u7ae0\u3002 \u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u8fd9\u7bc7\u6587\u7ae0\u4ec5\u4ee3\u8868\u4e2a\u4eba\u89c2\u70b9\uff0c\u5e76\u4e0d\u4ee3\u8868\u516c\u53f8\u6216\u7ec4\u7ec7 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2022-11-29T09:03:06+00:00","article_modified_time":"2024-05-03T16:55:28+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d542437434c4406cd1d3f\/8-0.png"}],"author":"\u9038, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u9038, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/","name":"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2022-11-29T09:03:06+00:00","dateModified":"2024-05-03T16:55:28+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4e00\u8fb9\u9010\u6b65\u5b89\u88c5Istio\u7ec4\u4ef6\uff0c\u4e00\u8fb9\u8fdb\u884c\u89e3\u91ca\u8bf4\u660e"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487","name":"\u9038, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","caption":"\u9038, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%b8%80%e8%be%b9%e9%80%90%e6%ad%a5%e5%ae%89%e8%a3%85istio%e7%bb%84%e4%bb%b6%ef%bc%8c%e4%b8%80%e8%be%b9%e8%bf%9b%e8%a1%8c%e8%a7%a3%e9%87%8a%e8%af%b4%e6%98%8e%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/43706","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=43706"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/43706\/revisions"}],"predecessor-version":[{"id":95140,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/43706\/revisions\/95140"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=43706"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=43706"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=43706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}