# istio install
## download istioctl
```shell
$ curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.7.3 sh -
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 107 100 107 0 0 58 0 0:00:01 0:00:01 --:--:-- 58
100 3896 100 3896 0 0 1683 0 0:00:02 0:00:02 --:--:-- 3804k
Downloading istio-1.7.3 from https://github.com/istio/istio/releases/download/1.7.3/istio-1.7.3-osx.tar.gz ...
Istio 1.7.3 Download Complete!
Istio has been successfully downloaded into the istio-1.7.3 folder on your system.
Next Steps:
See https://istio.io/docs/setup/kubernetes/install/ to add Istio to your Kubernetes cluster.
To configure the istioctl client tool for your workstation,
add the /tmp/istio-1.7.3/bin directory to your environment path variable with:
export PATH="$PATH:/tmp/istio-1.7.3/bin"
Begin the Istio pre-installation verification check by running:
istioctl verify-install
Need more information? Visit https://istio.io/docs/setup/kubernetes/install/
```
## install
```shell
$ ./istio-1.7.3/bin/istioctl install --set profile=minimal --set values.global.jwtPolicy=first-party-jwt --set addonComponents.grafana.enabled=false --set addonComponents.istiocoredns.enabled=false --set addonComponents.kiali.enabled=true --set addonComponents.prometheus.enabled=false --set addonComponents.tracing.enabled=false --set components.pilot.hub=docker.io/istio --set components.pilot.k8s.resources.requests.cpu=4000m --set components.pilot.k8s.resources.requests.memory=8Gi --set meshConfig.defaultConfig.binaryPath=/usr/local/bin/mosn --set meshConfig.defaultConfig.customConfigFile=/etc/istio/mosn/mosn_config_dubbo_xds.json --set meshConfig.defaultConfig.statusPort=15021 --set values.sidecarInjectorWebhook.rewriteAppHTTPProbe=false --set values.global.hub=symcn.tencentcloudcr.com/symcn --set values.global.proxy.logLevel=info --set values.kiali.hub=symcn.tencentcloudcr.com/symcn --set values.global.proxy.autoInject=disabled
Detected that your cluster does not support third party JWT authentication. Falling back to less secure first party JWT. See https://istio.io/docs/ops/best-practices/security/#configure-third-party-service-account-tokens for details.
! addonComponents.kiali.enabled is deprecated; use the samples/addons/ deployments instead
✔ Istio core installed
✔ Istiod installed
✔ Addons installed
✔ Installation complete
```
if already install istioctl
> istioctl install --set profile=minimal --set values.global.jwtPolicy=first-party-jwt --set addonComponents.grafana.enabled=false --set addonComponents.istiocoredns.enabled=false --set addonComponents.kiali.enabled=true --set addonComponents.prometheus.enabled=false --set addonComponents.tracing.enabled=false --set components.pilot.hub=docker.io/istio --set components.pilot.k8s.resources.requests.cpu=4000m --set components.pilot.k8s.resources.requests.memory=8Gi --set meshConfig.defaultConfig.binaryPath=/usr/local/bin/mosn --set meshConfig.defaultConfig.customConfigFile=/etc/istio/mosn/mosn_config_dubbo_xds.json --set meshConfig.defaultConfig.statusPort=15021 --set values.sidecarInjectorWebhook.rewriteAppHTTPProbe=false --set values.global.hub=symcn.tencentcloudcr.com/symcn --set values.global.proxy.logLevel=info --set values.kiali.hub=symcn.tencentcloudcr.com/symcn --set values.global.proxy.autoInject=disabled
## kiali config
```
kubectl create secret generic kiali -n istio-system --from-literal=username=admin --from-literal=passphrase=admin
```
## uninstall
### uninstall istio component
```shell
$ istioctl x uninstall --purge
All Istio resources will be pruned from the cluster
Proceed? (y/N) y
Removed HorizontalPodAutoscaler:istio-system:istiod.
Removed PodDisruptionBudget:istio-system:istiod.
Removed Deployment:istio-system:istiod.
Removed Deployment:istio-system:kiali.
Removed Service:istio-system:istiod.
Removed Service:istio-system:kiali.
Removed ConfigMap:istio-system:istio.
Removed ConfigMap:istio-system:istio-sidecar-injector.
Removed ConfigMap:istio-system:kiali.
Removed ServiceAccount:istio-system:istio-reader-service-account.
Removed ServiceAccount:istio-system:istiod-service-account.
Removed ServiceAccount:istio-system:kiali-service-account.
Removed RoleBinding:istio-system:istiod-istio-system.
Removed Role:istio-system:istiod-istio-system.
Removed EnvoyFilter:istio-system:metadata-exchange-1.6.
Removed EnvoyFilter:istio-system:metadata-exchange-1.7.
Removed EnvoyFilter:istio-system:stats-filter-1.6.
Removed EnvoyFilter:istio-system:stats-filter-1.7.
Removed EnvoyFilter:istio-system:tcp-metadata-exchange-1.6.
Removed EnvoyFilter:istio-system:tcp-metadata-exchange-1.7.
Removed EnvoyFilter:istio-system:tcp-stats-filter-1.6.
Removed EnvoyFilter:istio-system:tcp-stats-filter-1.7.
Removed MutatingWebhookConfiguration::istio-sidecar-injector.
Removed ValidatingWebhookConfiguration::istiod-istio-system.
Removed ClusterRole::istio-reader-istio-system.
Removed ClusterRole::istiod-istio-system.
Removed ClusterRole::kiali.
Removed ClusterRole::kiali-viewer.
Removed ClusterRoleBinding::istio-reader-istio-system.
Removed ClusterRoleBinding::istiod-pilot-istio-system.
Removed ClusterRoleBinding::kiali.
object: MutatingWebhookConfiguration::istio-sidecar-injector is not being deleted because it no longer exists
Removed MutatingWebhookConfiguration::istio-sidecar-injector.
object: ValidatingWebhookConfiguration::istiod-istio-system is not being deleted because it no longer exists
Removed ValidatingWebhookConfiguration::istiod-istio-system.
Removed CustomResourceDefinition::adapters.config.istio.io.
Removed CustomResourceDefinition::attributemanifests.config.istio.io.
Removed CustomResourceDefinition::authorizationpolicies.security.istio.io.
Removed CustomResourceDefinition::destinationrules.networking.istio.io.
Removed CustomResourceDefinition::envoyfilters.networking.istio.io.
Removed CustomResourceDefinition::gateways.networking.istio.io.
Removed CustomResourceDefinition::handlers.config.istio.io.
Removed CustomResourceDefinition::httpapispecbindings.config.istio.io.
Removed CustomResourceDefinition::httpapispecs.config.istio.io.
Removed CustomResourceDefinition::instances.config.istio.io.
Removed CustomResourceDefinition::istiooperators.install.istio.io.
Removed CustomResourceDefinition::peerauthentications.security.istio.io.
Removed CustomResourceDefinition::quotaspecbindings.config.istio.io.
Removed CustomResourceDefinition::quotaspecs.config.istio.io.
Removed CustomResourceDefinition::requestauthentications.security.istio.io.
Removed CustomResourceDefinition::rules.config.istio.io.
Removed CustomResourceDefinition::serviceentries.networking.istio.io.
Removed CustomResourceDefinition::sidecars.networking.istio.io.
Removed CustomResourceDefinition::templates.config.istio.io.
Removed CustomResourceDefinition::virtualservices.networking.istio.io.
Removed CustomResourceDefinition::workloadentries.networking.istio.io.
object: CustomResourceDefinition::adapters.config.istio.io is not being deleted because it no longer exists
Removed CustomResourceDefinition::adapters.config.istio.io.
object: CustomResourceDefinition::attributemanifests.config.istio.io is not being deleted because it no longer exists
Removed CustomResourceDefinition::attributemanifests.config.istio.io.
object: CustomResourceDefinition::authorizationpolicies.security.istio.io is not being deleted because it no longer exists
Removed CustomResourceDefinition::authorizationpolicies.security.istio.io.
object: CustomResourceDefinition::destinationrules.networking.istio.io is not being deleted because it no longer exists
Removed CustomResourceDefinition::destinationrules.networking.istio.io.
object: CustomResourceDefinition::envoyfilters.networking.istio.io is not being deleted because
没有合适的资源?快使用搜索试试~ 我知道了~
资源推荐
资源详情
资源评论
收起资源包目录
MOSN云原生网络数据平面 v1.6.0.zip (1601个子文件)
filter-c.cc 2KB
Client-TLSv10-ClientCert-ECDSA-ECDSA 10KB
Client-TLSv10-ClientCert-ECDSA-RSA 10KB
Client-TLSv10-ClientCert-RSA-ECDSA 10KB
Client-TLSv10-ClientCert-RSA-RSA 10KB
Client-TLSv10-ECDHE-ECDSA-AES 7KB
Client-TLSv10-ECDHE-RSA-AES 7KB
Client-TLSv10-ExportKeyingMaterial 7KB
Client-TLSv10-RSA-RC4 6KB
Client-TLSv11-ECDHE-ECDSA-AES 7KB
Client-TLSv11-ECDHE-RSA-AES 7KB
Client-TLSv11-RSA-RC4 6KB
Client-TLSv12-AES128-GCM-SHA256 6KB
Client-TLSv12-AES128-SHA256 7KB
Client-TLSv12-AES256-GCM-SHA384 6KB
Client-TLSv12-ALPN 7KB
Client-TLSv12-ALPN-NoMatch 7KB
Client-TLSv12-ClientCert-ECDSA-ECDSA 10KB
Client-TLSv12-ClientCert-ECDSA-RSA 10KB
Client-TLSv12-ClientCert-RSA-AES256-GCM-SHA384 10KB
Client-TLSv12-ClientCert-RSA-ECDSA 10KB
Client-TLSv12-ClientCert-RSA-PSS-Disabled 10KB
Client-TLSv12-ClientCert-RSA-PSS-Disabled-512 9KB
Client-TLSv12-ClientCert-RSA-RSA 10KB
Client-TLSv12-ClientCert-RSA-RSAPKCS1v15 10KB
Client-TLSv12-ClientCert-RSA-RSAPSS 10KB
Client-TLSv12-ECDHE-ECDSA-AES 7KB
Client-TLSv12-ECDHE-ECDSA-AES-GCM 7KB
Client-TLSv12-ECDHE-ECDSA-AES128-SHA256 7KB
Client-TLSv12-ECDHE-ECDSA-AES256-GCM-SHA384 7KB
Client-TLSv12-ECDHE-ECDSA-CHACHA20-POLY1305 6KB
Client-TLSv12-ECDHE-RSA-AES 7KB
Client-TLSv12-ECDHE-RSA-AES128-SHA256 8KB
Client-TLSv12-ECDHE-RSA-CHACHA20-POLY1305 6KB
Client-TLSv12-ExportKeyingMaterial 7KB
Client-TLSv12-P256-ECDHE 7KB
Client-TLSv12-RenegotiateOnce 18KB
Client-TLSv12-RenegotiateTwice 26KB
Client-TLSv12-RenegotiateTwiceRejected 18KB
Client-TLSv12-RenegotiationRejected 7KB
Client-TLSv12-RSA-RC4 6KB
Client-TLSv12-SCT 8KB
Client-TLSv12-X25519-ECDHE 7KB
Client-TLSv13-AES128-SHA256 7KB
Client-TLSv13-AES256-SHA384 7KB
Client-TLSv13-ALPN 7KB
Client-TLSv13-CHACHA20-SHA256 7KB
Client-TLSv13-ClientCert-ECDSA-RSA 11KB
Client-TLSv13-ClientCert-RSA-ECDSA 10KB
Client-TLSv13-ClientCert-RSA-PSS-Disabled 10KB
Client-TLSv13-ClientCert-RSA-RSAPSS 10KB
Client-TLSv13-ECDSA 6KB
Client-TLSv13-ExportKeyingMaterial 7KB
Client-TLSv13-HelloRetryRequest 9KB
Client-TLSv13-KeyUpdate 8KB
Client-TLSv13-P256-ECDHE 7KB
Client-TLSv13-X25519-ECDHE 7KB
supervisord.conf 2KB
mosn.conf 210B
cpulimitedgzip 44B
DockerBasefile 145B
Dockerfile 4KB
Dockerfile 1KB
Dockerfile 1KB
Dockerfile 845B
Dockerfile 827B
Dockerfile 628B
Dockerfile 296B
Dockerfile 155B
Dockerfile 143B
.gitignore 211B
.gitignore 141B
.gitkeep 0B
transport_test.go 111KB
server_test.go 107KB
mixer.pb.go 101KB
attributes.pb.go 91KB
server.go 89KB
client_config.pb.go 74KB
transport.go 72KB
handshake_server_test.go 63KB
handshake_client_test.go 57KB
upstream.go 56KB
mhttp2.go 53KB
quota.pb.go 51KB
api_spec.pb.go 49KB
convertxds.go 48KB
handshake_messages.go 47KB
downstream.go 46KB
frame.go 45KB
api_route.go 43KB
conn.go 42KB
convertxds_test.go 41KB
common_cgo.go 41KB
common.go 41KB
loadbalancer_test.go 35KB
stream.go 35KB
wasm.go 34KB
ciphers.go 34KB
convert_listener.go 32KB
共 1601 条
- 1
- 2
- 3
- 4
- 5
- 6
- 17
资源评论
芝麻粒儿
- 粉丝: 6w+
- 资源: 2万+
上传资源 快速赚钱
- 我的内容管理 展开
- 我的资源 快来上传第一个资源
- 我的收益 登录查看自己的收益
- 我的积分 登录查看自己的积分
- 我的C币 登录后查看C币余额
- 我的收藏
- 我的下载
- 下载帮助
最新资源
- 驱动代码驱动代码驱动代码驱动代码
- SVID_20240523_141155_1.mp4
- Code for the complete guide to tkinter tutorial
- 关于百货中心供应链管理系统.zip
- SimpleFolderIcon-master 修改Unity的Project下的文件夹图标
- A python Tkinter widget to display tile based maps
- A pure Python library for adding tables to a Tkinter application
- Vector资源文件.zip
- MobaXterm-Installer
- MicroMsg.xlsx
资源上传下载、课程学习等过程中有任何疑问或建议,欢迎提出宝贵意见哦~我们会及时处理!
点击此处反馈
安全验证
文档复制为VIP权益,开通VIP直接复制
信息提交成功