Istio安装与Bookinfo部署

一、下载Istio软件包

➜  ~ curl -L https://istio.io/downloadIstio | sh - 

➜  ~ ls -l istio-1.10.1               
total 48
-rw-r--r--   1 jyy  staff  11348  6  5 04:44 LICENSE
-rw-r--r--   1 jyy  staff   5866  6  5 04:44 README.md
drwxr-x---   3 jyy  staff     96  6  5 04:44 bin
-rw-r-----   1 jyy  staff    854  6  5 04:44 manifest.yaml
drwxr-xr-x   5 jyy  staff    160  6  5 04:44 manifests
drwxr-xr-x  21 jyy  staff    672  6  5 04:44 samples
drwxr-xr-x   5 jyy  staff    160  6  5 04:44 tools

二、安装Istio demo版本

➜  ~ export PATH="$PATH:/Users/jyy/istio-1.10.1/bin"
➜  ~ istioctl  version                              
no running Istio pods in "istio-system"
1.10.1

　　Istio有四个安装类型版本和自定义安装配置组件，分别是default、demo、minimal、remote，不同的安装类型版本，所安装的集群组件不同，此处我们安装demo版本的即可。
　　

~ istioctl manifest apply --set profile=demo 
Detected that your cluster does not support third party JWT authentication. Falling back to less secure first party JWT. See https://istio.io/v1.10/docs/ops/best-practices/security/#configure-third-party-service-account-tokens for details.
! values.global.jwtPolicy is deprecated; use Values.global.jwtPolicy=third-party-jwt. See http://istio.io/latest/docs/ops/best-practices/security/#configure-third-party-service-account-tokens for more information instead
This will install the Istio 1.10.1 demo profile with ["Istio core" "Istiod" "Ingress gateways" "Egress gateways"] components into the cluster. Proceed? (y/N) y
✔ Istio core installed                                                                                                 
✔ Istiod installed                                                                                                     
✔ Ingress gateways installed                                                                                           
✔ Egress gateways installed                                                                                            
✔ Installation complete                                                                                                Thank you for installing Istio 1.10.  Please take a few minutes to tell us about your install/upgrade experience!  https://forms.gle/KjkrDnMPByq7akrYA

三、部署Bookinfo项目
　　Bookinfo是Istio社区官方推荐的示例应用之一。它可以用来演示多种Istio的特性，并且它是一个异构的微服务应用。该应用由四个单独的微服务构成。 这个应用模仿了在线书店，可以展示书店中书籍的信息。例如页面上会显示一本书的描述，书籍的细节（ ISBN、页数等），以及关于这本书的一些评论。
　　Bookinfo 应用分为四个单独的微服务， 这些服务对 Istio 并无依赖，但是构成了一个有代表性的服务网格的例子：它由多个不同语言编写的服务构成，并且其中有一个应用会包含多个版本。

• productpage 会调用 details 和 reviews 两个微服务，用来生成页面。
• details 中包含了书籍的信息。
• reviews 中包含了书籍相关的评论。它还会调用 ratings 微服务。
• ratings 中包含了由书籍评价组成的评级信息。

reviews 微服务有 3 个版本，可用来展示各服务之间的不同的调用链路：

• v1 版本不会调用 ratings 服务。
• v2 版本会调用 ratings 服务，并使用 1 到 5 个黑色星形图标来显示评分信息。
• v3 版本会调用 ratings 服务，并使用 1 到 5 个红色星形图标来显示评分信息。
  

1）开启自动注入Sidecar功能，为default namespace打上istio-injectio=enable的标签

➜  ~ kubectl label namespace default istio-injection=enabled
namespace/default labeled

2）部署Bookinfo应用

➜  ~ cd istio-1.10.1                               
➜  istio-1.10.1 kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml
service/details created
serviceaccount/bookinfo-details created
deployment.apps/details-v1 created
service/ratings created
serviceaccount/bookinfo-ratings created
deployment.apps/ratings-v1 created
service/reviews created
serviceaccount/bookinfo-reviews created
deployment.apps/reviews-v1 created
deployment.apps/reviews-v2 created
deployment.apps/reviews-v3 created
service/productpage created
serviceaccount/bookinfo-productpage created
deployment.apps/productpage-v1 created

3）查看集群Service、Deployment及Pod状态

➜  ~ kubectl get services  -o wide 
NAME          TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)    AGE    SELECTOR
details       ClusterIP   10.99.16.140    <none>        9080/TCP   117s   app=details
kubernetes    ClusterIP   10.96.0.1       <none>        443/TCP    48d    <none>
productpage   ClusterIP   10.102.78.81    <none>        9080/TCP   117s   app=productpage
ratings       ClusterIP   10.101.12.136   <none>        9080/TCP   117s   app=ratings
reviews       ClusterIP   10.103.45.245   <none>        9080/TCP   117s   app=reviews

➜  ~ kubectl get deploy  -o wide 
NAME             READY   UP-TO-DATE   AVAILABLE   AGE     CONTAINERS    IMAGES                                                    SELECTOR
details-v1       1/1     1            1           2m34s   details       docker.io/istio/examples-bookinfo-details-v1:1.16.2       app=details,version=v1
productpage-v1   1/1     1            1           2m34s   productpage   docker.io/istio/examples-bookinfo-productpage-v1:1.16.2   app=productpage,version=v1
ratings-v1       1/1     1            1           2m34s   ratings       docker.io/istio/examples-bookinfo-ratings-v1:1.16.2       app=ratings,version=v1
reviews-v1       1/1     1            1           2m34s   reviews       docker.io/istio/examples-bookinfo-reviews-v1:1.16.2       app=reviews,version=v1
reviews-v2       1/1     1            1           2m34s   reviews       docker.io/istio/examples-bookinfo-reviews-v2:1.16.2       app=reviews,version=v2
reviews-v3       1/1     1            1           2m34s   reviews       docker.io/istio/examples-bookinfo-reviews-v3:1.16.2       app=reviews,version=v3

➜  ~ kubectl get pods  -o wide 
NAME                              READY   STATUS    RESTARTS   AGE    IP          NODE             NOMINATED NODE   READINESS GATES
details-v1-79f774bdb9-l7p7v       2/2     Running   0          3m5s   10.1.8.84   docker-desktop   <none>           <none>
productpage-v1-6b746f74dc-92v9z   2/2     Running   0          3m5s   10.1.8.88   docker-desktop   <none>           <none>
ratings-v1-b6994bb9-ksshh         2/2     Running   0          3m5s   10.1.8.85   docker-desktop   <none>           <none>
reviews-v1-545db77b95-lxt8r       2/2     Running   0          3m4s   10.1.8.89   docker-desktop   <none>           <none>
reviews-v2-7bf8c9648f-r8tdv       2/2     Running   0          3m5s   10.1.8.86   docker-desktop   <none>           <none>
reviews-v3-84779c7bbc-bwrhj       2/2     Running   0          3m5s   10.1.8.87   docker-desktop   <none>           <none>

4）查看productpage是否可访问

➜  ~ kubectl exec -it $(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}') -c ratings -- curl productpage:9080/productpage | grep -o "<title>.*</title>"
<title>Simple Bookstore App</title>

四、创建Gateway来暴露服务

1）创建Gateway

➜  ~ kubectl apply -f  istio-1.10.1/samples/bookinfo/networking/bookinfo-gateway.yaml 
gateway.networking.istio.io/bookinfo-gateway created
virtualservice.networking.istio.io/bookinfo created
➜  ~ 
➜  ~ kubectl get gw -o wide                                                          
NAME               AGE
bookinfo-gateway   12s
➜  ~ 
➜  ~ kubectl get gw bookinfo-gateway  -o yaml 
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"networking.istio.io/v1alpha3","kind":"Gateway","metadata":{"annotations":{},"name":"bookinfo-gateway","namespace":"default"},"spec":{"selector":{"istio":"ingressgateway"},"servers":[{"hosts":["*"],"port":{"name":"http","number":80,"protocol":"HTTP"}}]}}
  creationTimestamp: "2021-06-19T08:46:16Z"
  generation: 1
  managedFields:
  - apiVersion: networking.istio.io/v1alpha3
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:kubectl.kubernetes.io/last-applied-configuration: {}
      f:spec:
        .: {}
        f:selector:
          .: {}
          f:istio: {}
        f:servers: {}
    manager: kubectl-client-side-apply
    operation: Update
    time: "2021-06-19T08:46:16Z"
  name: bookinfo-gateway
  namespace: default
  resourceVersion: "613125"
  selfLink: /apis/networking.istio.io/v1beta1/namespaces/default/gateways/bookinfo-gateway
  uid: aa0a73e3-d1e1-4c16-8208-ba7c23ec87a8
spec:
  selector:
    istio: ingressgateway
  servers:
  - hosts:
    - '*'
    port:
      name: http
      number: 80
      protocol: HTTP

2）访问测试

➜  ~ export GATEWAY_URL=localhost:80 
➜  ~ curl -s http://$\{GATEWAY_URL\}/productpage | grep -o "<title>.*</title>" 
<title>Simple Bookstore App</title>

3）浏览器访问测试

4）清理Bookinfo

➜  ~ bash istio-1.10.1/samples/bookinfo/platform/kube/cleanup.sh