• 安装选项
    • certmanager 选项
    • galley 选项
    • gateways 选项
    • global 选项
    • grafana 选项
    • ingress 选项
    • kiali 选项
    • mixer 选项
    • pilot 选项
    • prometheus 选项
    • security 选项
    • sidecarInjectorWebhook 选项
    • telemetry-gateway 选项
    • tracing 选项
    • 相关内容

    安装选项

    可以通过在使用 Helm 命令时，增加 —set <key>=<value> 参数来覆写默认值的方式，来定制化安装 Istio。

    下面列出所有可用键名。

    certmanager 选项

    键默认值描述
    certmanager.enabledtrue
    certmanager.hubquay.io/jetstack
    certmanager.tagv0.3.1
    certmanager.resources{}

    galley 选项

    键默认值描述
    galley.enabledtrue
    galley.replicaCount1
    galley.imagegalley

    gateways 选项

    键默认值描述
    gateways.enabledtrue
    gateways.istio-ingressgateway.enabledtrue
    gateways.istio-ingressgateway.labels.appistio-ingressgateway
    gateways.istio-ingressgateway.labels.istioingressgateway
    gateways.istio-ingressgateway.replicaCount1
    gateways.istio-ingressgateway.autoscaleMin1
    gateways.istio-ingressgateway.autoscaleMax5
    gateways.istio-ingressgateway.resources{}
    gateways.istio-ingressgateway.loadBalancerIP""
    gateways.istio-ingressgateway.externalIPs[]
    gateways.istio-ingressgateway.serviceAnnotations{}
    gateways.istio-ingressgateway.typeLoadBalancer如果需要，请更改为 NodePort，ClusterIP 或 LoadBalancer
    gateways.istio-ingressgateway.ports.targetPort80
    gateways.istio-ingressgateway.ports.namehttp2
    gateways.istio-ingressgateway.ports.nodePort31380
    gateways.istio-ingressgateway.ports.namehttps
    gateways.istio-ingressgateway.ports.nodePort31390
    gateways.istio-ingressgateway.ports.nametcp
    gateways.istio-ingressgateway.ports.nodePort31400
    gateways.istio-ingressgateway.ports.targetPort15011
    gateways.istio-ingressgateway.ports.nametcp-pilot-grpc-tls
    gateways.istio-ingressgateway.ports.targetPort8060
    gateways.istio-ingressgateway.ports.nametcp-citadel-grpc-tls
    gateways.istio-ingressgateway.ports.targetPort15030
    gateways.istio-ingressgateway.ports.namehttp2-prometheus
    gateways.istio-ingressgateway.ports.targetPort15031
    gateways.istio-ingressgateway.ports.namehttp2-grafana
    gateways.istio-ingressgateway.secretVolumes.secretNameistio-ingressgateway-certs
    gateways.istio-ingressgateway.secretVolumes.mountPath/etc/istio/ingressgateway-certs
    gateways.istio-ingressgateway.secretVolumes.secretNameistio-ingressgateway-ca-certs
    gateways.istio-ingressgateway.secretVolumes.mountPath/etc/istio/ingressgateway-ca-certs
    gateways.istio-egressgateway.enabledtrue
    gateways.istio-egressgateway.labels.appistio-egressgateway
    gateways.istio-egressgateway.labels.istioegressgateway
    gateways.istio-egressgateway.replicaCount1
    gateways.istio-egressgateway.autoscaleMin1
    gateways.istio-egressgateway.autoscaleMax5
    gateways.istio-egressgateway.serviceAnnotations{}
    gateways.istio-egressgateway.typeClusterIP如果需要，请更改为 NodePort 或 LoadBalancer
    gateways.istio-egressgateway.ports.namehttp2
    gateways.istio-egressgateway.ports.name.namehttps
    gateways.istio-egressgateway.secretVolumes.secretNameistio-egressgateway-certs
    gateways.istio-egressgateway.secretVolumes.secretName.mountPath/etc/istio/egressgateway-certs
    gateways.istio-egressgateway.secretVolumes.secretName.secretNameistio-egressgateway-ca-certs
    gateways.istio-egressgateway.secretVolumes.secretName.mountPath/etc/istio/egressgateway-ca-certs
    gateways.istio-ilbgateway.enabledfalse
    gateways.istio-ilbgateway.enabled.labels.appistio-ilbgateway
    gateways.istio-ilbgateway.enabled.labels.istioilbgateway
    gateways.istio-ilbgateway.enabled.replicaCount1
    gateways.istio-ilbgateway.enabled.autoscaleMin1
    gateways.istio-ilbgateway.enabled.autoscaleMax5
    gateways.istio-ilbgateway.enabled.resources.requests.cpu800m
    gateways.istio-ilbgateway.enabled.resources.requests.memory512Mi
    gateways.istio-ilbgateway.enabled.loadBalancerIP""
    gateways.istio-ilbgateway.enabled.serviceAnnotations.cloud.google.com/load-balancer-type"internal"
    gateways.istio-ilbgateway.enabled.typeLoadBalancer
    gateways.istio-ilbgateway.enabled.ports.namegrpc-pilot-mtls
    gateways.istio-ilbgateway.enabled.ports.namegrpc-pilot
    gateways.istio-ilbgateway.enabled.ports.targetPort8060
    gateways.istio-ilbgateway.enabled.ports.nametcp-citadel-grpc-tls
    gateways.istio-ilbgateway.enabled.ports.nametcp-dns
    gateways.istio-ilbgateway.enabled.secretVolumes.secretNameistio-ilbgateway-certs
    gateways.istio-ilbgateway.enabled.secretVolumes.mountPath/etc/istio/ilbgateway-certs
    gateways.istio-ilbgateway.enabled.secretVolumes.secretNameistio-ilbgateway-ca-certs
    gateways.istio-ilbgateway.enabled.secretVolumes.mountPath/etc/istio/ilbgateway-ca-certs

    global 选项

    键默认值描述
    global.hubdocker.io/istio
    global.tag1.0.0
    global.k8sIngressSelectoringress
    global.k8sIngressHttpsfalse
    global.proxy.imageproxyv2
    global.proxy.resources.requests.cpu10m
    global.proxy.accessLogFile"/dev/stdout"
    global.proxy.enableCoreDumpfalse
    global.proxy.includeIPRanges""
    global.proxy.excludeIPRanges""
    global.proxy.includeInboundPorts""
    global.proxy.excludeInboundPorts""
    global.proxy.autoInjectenabled
    global.proxy_init.imageproxy_init
    global.imagePullPolicyIfNotPresent
    global.controlPlaneSecurityEnabledtrue
    global.disablePolicyChecksfalse
    global.enableTracingtrue
    global.mtls.enabledtrue
    global.arch.amd642
    global.arch.s390x2
    global.arch.ppc64le2
    global.oneNamespacefalse
    global.configValidationtrue
    global.meshExpansionfalse
    global.meshExpansionILBfalse
    global.defaultResources.requests.cpu10m
    global.hyperkube.hubquay.io/coreos
    global.hyperkube.tagv1.7.6_coreos.0
    global.priorityClassName""
    global.crdstrue

    grafana 选项

    键默认值描述
    grafana.enabledtrue
    grafana.replicaCount1
    grafana.imagegrafana
    grafana.security.enabledtrue
    grafana.security.adminUseradmin
    grafana.security.adminPasswordadmin
    grafana.service.annotations{}
    grafana.service.namehttp
    grafana.service.typeClusterIP
    grafana.service.externalPort3000
    grafana.service.internalPort3000

    ingress 选项

    键默认值描述
    ingress.enabledtrue
    ingress.replicaCount1
    ingress.autoscaleMin1
    ingress.autoscaleMax5
    ingress.service.annotations{}
    ingress.service.loadBalancerIP""
    ingress.service.typeLoadBalancer如果需要，请更改为 NodePort，ClusterIP 或 LoadBalancer
    ingress.service.ports.namehttp
    ingress.service.ports.nodePort32000
    ingress.service.ports.namehttps
    ingress.service.selector.istioingress

    kiali 选项

    键默认值描述
    kiali.enabledtrue
    kiali.replicaCount1
    kiali.hubdocker.io/kiali
    kiali.tagistio-release-1.0
    kiali.ingress.enabledtrue
    kiali.dashboard.usernameadmin
    kiali.dashboard.passphraseadmin

    mixer 选项

    键默认值描述
    mixer.enabledtrue
    mixer.replicaCount1
    mixer.autoscaleMin1
    mixer.autoscaleMax5
    mixer.imagemixer
    mixer.istio-policy.autoscaleEnabledtrue
    mixer.istio-policy.autoscaleMin1
    mixer.istio-policy.autoscaleMax5
    mixer.istio-policy.cpu.targetAverageUtilization80
    mixer.istio-telemetry.autoscaleEnabledtrue
    mixer.istio-telemetry.autoscaleMin1
    mixer.istio-telemetry.autoscaleMax5
    mixer.istio-telemetry.cpu.targetAverageUtilization80
    mixer.prometheusStatsdExporter.hubdocker.io/prom
    mixer.prometheusStatsdExporter.tagv0.6.0

    pilot 选项

    键默认值描述
    pilot.enabledtrue
    pilot.replicaCount1
    pilot.autoscaleMin1
    pilot.autoscaleMax1
    pilot.imagepilot
    pilot.sidecartrue
    pilot.traceSampling100.0
    pilot.resources.requests.cpu500m
    pilot.resources.requests.memory2048Mi

    prometheus 选项

    键默认值描述
    prometheus.enabledtrue
    prometheus.replicaCount1
    prometheus.hubdocker.io/prom
    prometheus.tagv2.3.1
    prometheus.service.annotations{}
    prometheus.service.nodePort.enabledfalse
    prometheus.service.nodePort.port32090

    security 选项

    键默认值描述
    security.replicaCount1
    security.imagecitadel
    security.selfSignedtrue指示是否使用自签名 CA.

    sidecarInjectorWebhook 选项

    键默认值描述
    sidecarInjectorWebhook.enabledtrue
    sidecarInjectorWebhook.replicaCount1
    sidecarInjectorWebhook.imagesidecar_injector
    sidecarInjectorWebhook.enableNamespacesByDefaultfalse

    telemetry-gateway 选项

    键默认值描述
    telemetry-gateway.gatewayNameingressgateway
    telemetry-gateway.grafanaEnabledtrue
    telemetry-gateway.prometheusEnabledtrue

    tracing 选项

    键默认值描述
    tracing.enabledtrue
    tracing.providerjaeger
    tracing.jaeger.hubdocker.io/jaegertracing
    tracing.jaeger.tag1.5
    tracing.jaeger.memory.max_traces50000
    tracing.jaeger.ui.port16686
    tracing.replicaCount1
    tracing.service.annotations{}
    tracing.service.namehttp
    tracing.service.typeClusterIP
    tracing.service.externalPort9411
    tracing.service.internalPort9411
    tracing.ingress.enabledfalse

    相关内容

    使用 Helm 进行安装

    使用内含的 Helm chart 安装 Istio。

    安装 Istio CNI

    Istio CNI 插件的安装和使用，该插件让运维人员可以用较低的权限来完成网格服务的部署工作。

    Istio Sidecar 注入过程解密

    Istio 将数据面组件注入到现存部署之中的过程。

    Gateway 连接

    使用 Istio Gateway 跨越多个 Kubernetes 集群安装 Istio 网格以访问远程 pod。

    Google Kubernetes Engine

    基于 GKE 的 Istio 多集群安装。

    Google Kubernetes Engine

    对 Google Kubernetes Engine（GKE）集群进行配置以便安装运行 Istio。