1. istio1.0安装 创建 istio 目录 [root@centos-110 ~]# mkdir istio [root@centos-110 ~]# cd istio 1.1 获取安装包 链接：https://pan.baidu.com/s/1HQsXvN3Rgo5F7C9XYkhZng 提取码：uqwk 解压： tar -zxvf istio-1.0.0-linux.tar.gz 1.2 安装istioctl cp istio-1.0.0/bin/istioctl /usr/local/bin/ 验证istioctl 安装成功 [root@test2 istio]# istioctl version Version: 1.0.0 GitRevision: 3a136c90ec5e308f236e0d7ebb5c4c5e405217f4 User: root@71a9470ea93c Hub: gcr.io/istio-release GolangVersion: go1.10.1 BuildStatus: Clean 需要先拉取镜像： docker pull daocloud.io/liukuan73/proxy_init:1.0.0 docker pull daocloud.io/liukuan73/galley:1.0.0 docker pull daocloud.io/liukuan73/mixer:1.0.0 docker pull daocloud.io/liukuan73/proxyv2:1.0.0 docker pull daocloud.io/liukuan73/pilot:1.0.0 docker pull daocloud.io/liukuan73/citadel:1.0.0 docker pull daocloud.io/liukuan73/servicegraph:1.0.0 docker pull daocloud.io/liukuan73/sidecar_injector:1.0.0 docker pull daocloud.io/liukuan73/istio-grafana:1.0.0 docker pull daocloud.io/liukuan73/hyperkube:v1.7.6_coreos.0 给镜像重新打标签，保证和下面步骤中istio-demo.yaml里面的镜像保持一致 docker tag daocloud.io/liukuan73/proxy_init:1.0.0 gcr.io/istio-release/proxy_init:1.0.0 docker tag daocloud.io/liukuan73/hyperkube:v1.7.6_coreos.0 quay.io/coreos/hyperkube:v1.7.6_coreos.0 docker tag daocloud.io/liukuan73/galley:1.0.0 gcr.io/istio-release/galley:1.0.0 docker tag daocloud.io/liukuan73/proxyv2:1.0.0 gcr.io/istio-release/proxyv2:1.0.0 docker tag daocloud.io/liukuan73/istio-grafana:1.0.0 gcr.io/istio-release/grafana:1.0.0 docker tag daocloud.io/liukuan73/mixer:1.0.0 gcr.io/istio-release/mixer:1.0.0 docker tag daocloud.io/liukuan73/pilot:1.0.0 gcr.io/istio-release/pilot:1.0.0 docker tag daocloud.io/liukuan73/citadel:1.0.0 gcr.io/istio-release/citadel:1.0.0 docker tag daocloud.io/liukuan73/servicegraph:1.0.0 gcr.io/istio-release/servicegraph:1.0.0 docker tag daocloud.io/liukuan73/sidecar_injector:1.0.0 gcr.io/istio-release/sidecar_injector:1.0.0 注意：这个时候不能把原先的镜像给删除，删除原来镜像后，之后打的标签镜像也会跟着删除 1.3 部署istio 1.3.1、安装Istio的CRD（Custom Resource Definitions） kubectl apply -f /root/istio/istio-1.0.0/install/kubernetes/helm/istio/templates/crds.yaml 1.3.2、安装Istio - Sidecars之间不启用TLS认证 kubectl apply -f /root/istio/istio-1.0.0/install/kubernetes/istio-demo.yaml 注意： 启动文件默认配置的通过外部LoadBalancer访问istio-ingressgateway， 如果没有外部LoadBalancer，需要修改启动文件使用NodePort访问istio-ingressgateway：sed -i 's/LoadBalancer/NodePort/g' /root/istio/istio-1.0.0/install/kubernetes/istio-demo.yaml
本实验需要先修改为NodePort然后再执行上面的操作 1.3.3 验证安装是否成功 查看是否所有服务和pod都正常：发现有两个不正常，没有影响的，
[root@test2 ~]# kubectl get pods -n istio-system
NAME READY STATUS RESTARTS AGE
grafana-86645d6b4d-4tvjx 1/1 Running 2 18h
istio-citadel-55d9bb9b5f-mx2jq 1/1 Running 2 18h
istio-cleanup-secrets-pd8nj 0/1 Completed 0 18h
istio-egressgateway-74bbdd9669-c4k5r 1/1 Running 3 18h
istio-galley-d4bc6c974-c5znr 1/1 Running 3 18h
istio-grafana-post-install-jj96w 0/1 Completed 0 18h
istio-ingressgateway-756584cc64-f6llj 1/1 Running 3 18h
istio-pilot-7dd78846f5-jsd7b 2/2 Running 4 18h
istio-policy-b9d65465-vmnz2 2/2 Running 4 18h
istio-sidecar-injector-854f6498d9-pgpxg 1/1 Running 2 18h
istio-statsd-prom-bridge-549d687fd9-664w2 1/1 Running 2 18h
istio-telemetry-64fff55fdd-wbn69 2/2 Running 4 18h
istio-tracing-7596597bd7-cb25d 1/1 Running 2 18h
prometheus-6ffc56584f-9kzqm 1/1 Running 2 18h
servicegraph-7bdb8bfc9d-mj7nw 1/1 Running 2 18h
[root@test2 ~]# kubectl get svc -n istio-system NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE grafana ClusterIP 10.111.151.30 <none> 3000/TCP 4m istio-citadel ClusterIP 10.111.58.240 <none> 8060/TCP,9093/TCP 4m istio-egressgateway ClusterIP 10.97.76.172 <none> 80/TCP,443/TCP 4m istio-galley ClusterIP 10.96.7.223 <none> 443/TCP,9093/TCP 4m istio-ingressgateway NodePort 10.102.210.209 <none> 80:31380/TCP,443:31390/TCP,31400:31400/TCP,15011:35476/TCP,8060:37349/TCP,15030:42116/TCP,15031:37047/TCP 4m istio-pilot ClusterIP 10.104.75.8 <none> 15010/TCP,15011/TCP,8080/TCP,9093/TCP 4m istio-policy ClusterIP 10.99.66.239 <none> 9091/TCP,15004/TCP,9093/TCP 4m istio-sidecar-injector ClusterIP 10.109.151.144 <none> 443/TCP 4m istio-statsd-prom-bridge ClusterIP 10.107.239.158 <none> 9102/TCP,9125/UDP 4m istio-telemetry ClusterIP 10.111.200.34 <none> 9091/TCP,15004/TCP,9093/TCP,42422/TCP 4m jaeger-agent ClusterIP None <none> 5775/UDP,6831/UDP,6832/UDP 4m jaeger-collector ClusterIP 10.97.185.97 <none> 14267/TCP,14268/TCP 4m jaeger-query ClusterIP 10.102.95.55 <none> 16686/TCP 4m prometheus ClusterIP 10.109.160.215 <none> 9090/TCP 4m servicegraph ClusterIP 10.100.66.9 <none> 8088/TCP 4m tracing ClusterIP 10.99.88.51 <none> 80/TCP 4m zipkin ClusterIP 10.105.223.138 <none> 9411/TCP 4m 至此，Istio 已经安装完成了 参照： https://www.cnblogs.com/rickie/p/istio.html https://blog.csdn.net/liukuan73/article/details/81165716