做网站包含微信公众号吗,线下编程课程收费标准,太原做网站的网络公司,工商网站查询企业信息查询官网项目背景 按照istio官网的命令一路安装下来#xff0c;安装好的istio版本为目前的最新版本#xff0c;1.22.0。而我的k8s集群的版本并不支持istio_1.22的版本#xff0c;导致ingress-gate网关安装不上#xff0c;再仔细查看istio的发布文档#xff0c;如果用istio_1.22版本…项目背景 按照istio官网的命令一路安装下来安装好的istio版本为目前的最新版本1.22.0。而我的k8s集群的版本并不支持istio_1.22的版本导致ingress-gate网关安装不上再仔细查看istio的发布文档如果用istio_1.22版本k8s的版本至少也得是1.27。与其升级k8s我还是换掉istio的版本。
# istioctl version
client version: 1.22.0
control plane version: 1.22.0
data plane version: none# kubectl version
Client Version: version.Info{Major:1, Minor:23, GitVersion:v1.23.4, GitCommit:e6c093d87ea4cbb530a7b2ae91e54c0842d8308a, GitTreeState:clean, BuildDate:2022-02-16T12:38:05Z, GoVersion:go1.17.7, Compiler:gc, Platform:linux/amd64}
Server Version: version.Info{Major:1, Minor:23, GitVersion:v1.23.4, GitCommit:e6c093d87ea4cbb530a7b2ae91e54c0842d8308a, GitTreeState:clean, BuildDate:2022-02-16T12:32:02Z, GoVersion:go1.17.7, Compiler:gc, Platform:linux/amd64} 1.安装istio_1.17.8
查看istio的支持版本1.17.8是17版本最后一次更新也正好适配我目前的k8s版本。
1.1下载地址
Release Istio 1.17.8 · istio/istio · GitHub 1.2上传并解压
# ll
-rw-r--r-- 1 root root 27127663 Jun 5 16:25 istio-1.17.8-linux-amd64.tar.gz
1.3 新增环境变量
# cat /etc/profile
...
export PATH/usr/local/openssh-8.5p1/sbin:/usr/local/openssh-8.5p1/bin:$PATH
export KUBECONFIG/etc/kubernetes/admin.conf
export PATH/home/root/k8s/istio_test/install/istio-1.17.8/bin/:$PATH
#export PATH/home/root/k8s/istio_test/install/istio-1.22.0/bin:$PATHsource /etc/profile
# istioctl version
client version: 1.17.8
control plane version: 1.22.0
data plane version: 0
1.4 install
# istioctl install --set profiledemo -y
WARNING: Istio control planes installed: 1.22.0.
WARNING: An older installed version of Istio has been detected. Running this command will overwrite it.
✔ Istio core installed
- Processing resources for Istiod. Waiting for Deployment/istio-system/istiod ^C
[foothost-10-19-83-151 istio-1.17.8]$ istioctl install --set profiledemo -y -n bookinfo
WARNING: Istio control planes installed: 1.22.0.
WARNING: An older installed version of Istio has been detected. Running this command will overwrite it.
✔ Istio core installed
✔ Istiod installed
- Processing resources for Egress gateways, Ingress gateways. Waiting for Deployment/istio-system/istio-egressgateway, Deployment/istio-system/istio-ingressga...
✔ Egress gateways installed
✔ Ingress gateways installed
✔ Installation complete Making this installation the default for injection and validation.Thank you for installing Istio 1.17. Please take a few minutes to tell us about your install/upgrade experience! https://forms.gle/hMHGiwZHPU7UQRWe9
查看pod情况
# kubectl get po -A
NAMESPACE NAME READY STATUS RESTARTS AGE
ingress-nginx nginx-deployment-64d5f7665c-56cpz 1/1 Running 0 22d
ingress-nginx nginx-ingress-controller-7cfc988f46-cszsd 1/1 Running 0 22d
istio-system istio-egressgateway-85df6b84b7-hjlbx 1/1 Running 0 92s
istio-system istio-ingressgateway-6bb8fb6549-wcgqq 1/1 Running 0 92s
istio-system istiod-8d74787f-bckft 1/1 Running 0 2m37s 再次查看版本
# istioctl version
client version: 1.17.8
control plane version: 1.17.8
data plane version: 1.17.8 (2 proxies) 2.部署demo
2.1.1 准备
给这些示例服务创建一个命名空间。
kubectl create namespace bookinfo
给命名空间添加 Istio 的标签指示 Istio 在部署应用只对 Pod 起效的时候自动注入 Envoy Sidecar Proxy 容器
kubectl label namespace bookinfo istio-injectionenabled 开启让 Istio 注入 Sidecar 有很多种方式其中一种是给命名空间设置下标签在此命名空间下部署的 Pod会被自动注入 Sidecar 。 demo是官方提供的demobookinfo
文件位置https://github.com/whuanle/istio_book/tree/main/3。
仓库拉取后打开 3 目录执行命令进行部署
# ll
total 68
-rw-rw-r-- 1 root root 598 Jun 5 15:14 details_deploy.yaml
-rw-rw-r-- 1 root root 108 Jun 5 15:14 details_sa.yaml
-rw-rw-r-- 1 root root 190 Jun 5 15:14 details_svc.yaml
-rw-rw-r-- 1 root root 278 Jun 5 15:14 ingress_gateway.yaml
-rw-rw-r-- 1 root root 754 Jun 5 15:14 productpage_deploy.yaml
-rw-rw-r-- 1 root root 116 Jun 5 15:14 productpage_sa.yaml
-rw-rw-r-- 1 root root 206 Jun 5 15:14 productpage_svc.yaml
-rw-rw-r-- 1 root root 227 Jun 5 15:14 productpage_tmpsvc.yaml
-rw-rw-r-- 1 root root 466 Jun 5 15:14 productpage_vs.yaml
-rw-rw-r-- 1 root root 598 Jun 5 15:14 ratings_deploy.yaml
-rw-rw-r-- 1 root root 108 Jun 5 15:14 ratings_sa.yaml
-rw-rw-r-- 1 root root 190 Jun 5 15:14 ratings_svc.yaml
-rw-rw-r-- 1 root root 108 Jun 5 15:14 reviews_sa.yaml
-rw-rw-r-- 1 root root 190 Jun 5 15:14 reviews_svc.yaml
-rw-rw-r-- 1 root root 913 Jun 5 15:14 reviews_v1_deploy.yaml
-rw-rw-r-- 1 root root 913 Jun 5 15:14 reviews_v2_deploy.yaml
-rw-rw-r-- 1 root root 913 Jun 5 15:14 reviews_v3_deploy.yaml
既然不能一次都执行了那就一个一个yaml命令执行吧。
2.1.2 detail Detail:存储了书籍信息的应用。 1.使用 Deployment 部署 details 应用。 2.为 details 服务配置 Kubernetes Service 。 3.为 details 服务创建一个 ServiceAccount。 $ kubectl apply -f *.yaml
error: Unexpected args: [details_sa.yaml details_svc.yaml ingress_gateway.yaml productpage_deploy.yaml productpage_sa.yaml productpage_svc.yaml productpage_tmpsvc.yaml productpage_vs.yaml ratings_deploy.yaml ratings_sa.yaml ratings_svc.yaml reviews_sa.yaml reviews_svc.yaml reviews_v1_deploy.yaml reviews_v2_deploy.yaml reviews_v3_deploy.yaml]
See kubectl apply -h for help and examples# kubectl apply -f details_*.yaml
error: Unexpected args: [details_sa.yaml details_svc.yaml]
See kubectl apply -h for help and examples# kubectl apply -f details_deploy.yaml -n bookinfo
deployment.apps/details-v1 created
# kubectl apply -f details_sa.yaml -n bookinfo
serviceaccount/bookinfo-details created
# kubectl apply -f details_svc.yaml -n bookinfo
service/details created# kubectl get po -n bookinfo
NAME READY STATUS RESTARTS AGE
details-v1-698b5d8c98-bnd52 1/1 Running 0 2m27s
2.1.3 ratings 提供每条评论的打星数据。 # kubectl apply -f ratings_deploy.yaml -n bookinfo
deployment.apps/ratings-v1 created
# kubectl apply -f ratings_svc.yaml -n bookinfo
service/ratings created
#kubectl apply -f ratings_sa.yaml -n bookinfo
serviceaccount/bookinfo-ratings created# kubectl get po -n bookinfo
NAME READY STATUS RESTARTS AGE
details-v1-698b5d8c98-bnd52 1/1 Running 0 13m
ratings-v1-5967f59c58-st7xr 1/1 Running 0 4m48s 2.1.4 review 提供书籍的评论信息 # kubectl apply -f reviews_svc.yaml -n bookinfo
service/reviews created
# kubectl apply -f reviews_sa.yaml -n bookinfo
serviceaccount/bookinfo-reviews unchanged
# kubectl apply -f reviews_v1_deploy.yaml -n bookinfo
deployment.apps/reviews-v1 created
[foothost-10-19-83-151 3]$ kubectl apply -f reviews_v2_deploy.yaml -n bookinfo
deployment.apps/reviews-v2 created
[foothost-10-19-83-151 3]$ kubectl apply -f reviews_v3_deploy.yaml -n bookinfo
deployment.apps/reviews-v3 created# kubectl get po -n bookinfo
NAME READY STATUS RESTARTS AGE
details-v1-698b5d8c98-bnd52 1/1 Running 0 22m
ratings-v1-5967f59c58-st7xr 1/1 Running 0 13m
reviews-v1-9c6bb6658-dc5s9 1/1 Running 0 6m15s
reviews-v2-8454bb78d8-fghsh 1/1 Running 0 6m8s
reviews-v3-6dc9897554-zpdl2 1/1 Running 0 6m3s
2.1.5 productpage 页面 # kubectl apply -f productpage_deploy.yaml -n bookinfo
deployment.apps/productpage-v1 created
# kubectl apply -f productpage_svc.yaml -n bookinfo
service/productpage created
# kubectl apply -f productpage_sa.yaml -n bookinfo
serviceaccount/bookinfo-productpage created# kubectl get po -n bookinfo
NAME READY STATUS RESTARTS AGE
details-v1-698b5d8c98-bnd52 1/1 Running 0 23m
productpage-v1-bf4b489d8-z9wxp 1/1 Running 0 46s
ratings-v1-5967f59c58-st7xr 1/1 Running 0 15m
reviews-v1-9c6bb6658-dc5s9 1/1 Running 0 7m56s
reviews-v2-8454bb78d8-fghsh 1/1 Running 0 7m49s
reviews-v3-6dc9897554-zpdl2 1/1 Running 0 7m44s 聚合服务供用户浏览书籍信息。 2.1.6 检查
2.6.1 get all
# kubectl get all -n bookinfo
NAME READY STATUS RESTARTS AGE
pod/details-v1-698b5d8c98-bnd52 1/1 Running 0 25m
pod/productpage-v1-bf4b489d8-z9wxp 1/1 Running 0 2m4s
pod/ratings-v1-5967f59c58-st7xr 1/1 Running 0 16m
pod/reviews-v1-9c6bb6658-dc5s9 1/1 Running 0 9m14s
pod/reviews-v2-8454bb78d8-fghsh 1/1 Running 0 9m7s
pod/reviews-v3-6dc9897554-zpdl2 1/1 Running 0 9m2sNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/details ClusterIP 10.102.62.72 none 9080/TCP 24m
service/productpage ClusterIP 10.96.210.213 none 9080/TCP 117s
service/ratings ClusterIP 10.103.80.45 none 9080/TCP 16m
service/reviews ClusterIP 10.102.163.207 none 9080/TCP 9m40sNAME READY UP-TO-DATE AVAILABLE AGE
deployment.apps/details-v1 1/1 1 1 25m
deployment.apps/productpage-v1 1/1 1 1 2m5s
deployment.apps/ratings-v1 1/1 1 1 16m
deployment.apps/reviews-v1 1/1 1 1 9m14s
deployment.apps/reviews-v2 1/1 1 1 9m7s
deployment.apps/reviews-v3 1/1 1 1 9m2sNAME DESIRED CURRENT READY AGE
replicaset.apps/details-v1-698b5d8c98 1 1 1 25m
replicaset.apps/productpage-v1-bf4b489d8 1 1 1 2m5s
replicaset.apps/ratings-v1-5967f59c58 1 1 1 16m
replicaset.apps/reviews-v1-9c6bb6658 1 1 1 9m14s
replicaset.apps/reviews-v2-8454bb78d8 1 1 1 9m7s
replicaset.apps/reviews-v3-6dc9897554 1 1 1 9m2s
2.1.6.2 curl productpage
$ curl 10.96.210.213:9080
!DOCTYPE html
htmlheadtitleSimple Bookstore App/title
meta charsetutf-8
meta http-equivX-UA-Compatible contentIEedge
meta nameviewport contentwidthdevice-width, initial-scale1!-- Latest compiled and minified CSS --
link relstylesheet hrefstatic/bootstrap/css/bootstrap.min.css!-- Optional theme --
link relstylesheet hrefstatic/bootstrap/css/bootstrap-theme.min.css/headbodyph3Hello! This is a simple bookstore application consisting of three services as shown below/h3
/ptable classtable table-condensed table-bordered table-hovertrthname/thtdhttp://details:9080/td/trtrthendpoint/thtddetails/td/trtrthchildren/thtdtable classtable table-condensed table-bordered table-hovertrthname/ththendpoint/ththchildren/th/trtrtdhttp://details:9080/tdtddetails/tdtd/td/trtrtdhttp://reviews:9080/tdtdreviews/tdtdtable classtable table-condensed table-bordered table-hovertrthname/ththendpoint/ththchildren/th/trtrtdhttp://ratings:9080/tdtdratings/tdtd/td/tr/table/td/tr/table/td/tr/tableph4Click on one of the links below to auto generate a request to the backend as a real user or a tester/h4
/p
pa href/productpage?unormalNormal user/a/p
pa href/productpage?utestTest user/a/p!-- Latest compiled and minified JavaScript --
script srcstatic/jquery.min.js/script!-- Latest compiled and minified JavaScript --
script srcstatic/bootstrap/js/bootstrap.min.js/script/body
/html
有这一串xml文件就是部署成功了。放到浏览器中访问无法访问。
2.1.7 临时访问
将ingress-gageway.yaml复制一份
# kubectl apply -f productpage_tmpsvc.yaml -n bookinfo
service/productpagetmp created
# kubectl get svc -n book
No resources found in book namespace.
# kubectl get svc -n bookinfo
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
details ClusterIP 10.102.62.72 none 9080/TCP 30m
productpage ClusterIP 10.96.210.213 none 9080/TCP 7m14s
productpagetmp NodePort 10.111.122.78 none 9080:31680/TCP 17s
ratings ClusterIP 10.103.80.45 none 9080/TCP 21m
reviews ClusterIP 10.102.163.207 none 9080/TCP 14m
页面中输入 虚拟机ip31680 带上上下文访问 一直刷新就行会轮寻review的三个版本的pod
2.1.8 配置gateway hosts 表示对外开放的访问路径你可以绑定域名、IP 等。 这里使用 * 表示所有访问都可以进入此网关。 # kubectl apply -f ingress_gateway.yaml -n bookinfo
gateway.networking.istio.io/bookinfo-gateway created
模型来到这会 2.1.9 部署VistualService
虽然创建了 Istio Gateway但是我们还不能直接通过网关访问到前面部署的微服务我们还需要创建 Istio VirtualService 将 Istio Gateway 跟对应的 Kubernetes Service 绑定起来然后流量才能正式流向 Pod。 流量实际并不会经过 Service 中但是 VirtualService 需要通过 Service 来发现 Pod
# kubectl apply -f productpage_vs.yaml
virtualservice.networking.istio.io/bookinfo created
2.1.10 检查验证是否部署成功
有返回则bookinfo应用正常
# kubectl exec $(kubectl get pod -l appratings -n bookinfo -o jsonpath{.items[0].metadata.name}) -n bookinfo -c ratings -- curl -S productpage:9080/productpage | grep -o title.*/title% Total % Received % Xferd Average Speed Time Time Time CurrentDload Upload Total Spent Left Speed
100 5294 100 5294 0 0 4086 0 0:00:01 0:00:01 --:--:-- 4088
titleSimple Bookstore App/title
3.对外开放应用程序
3.1 创建istio入站ingress Gateway
不设置namespace时ingressGageway将运行在默认default命名空间中。添加方式如下新增namespace属性。
cat bookinfo-gateway.yaml
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:name: bookinfo-gatewaynamespace: bookinfo
spec:selector:istio: ingressgateway # use istio default controllerservers:- port:number: 80name: httpprotocol: HTTPhosts:- *
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:name: bookinfonamespace: bookinfo
spec:hosts:- *gateways:- bookinfo-gatewayhttp:- match:- uri:exact: /productpage- uri:prefix: /static- uri:exact: /login- uri:exact: /logout- uri:prefix: /api/v1/productsroute:- destination:host: productpageport:number: 9080
3.2 运行安装ingress Gateway
# kubectl apply -f bookinfo-gateway.yaml
gateway.networking.istio.io/bookinfo-gateway created
virtualservice.networking.istio.io/bookinfo created# istioctl analyze
Info [IST0102] (Namespace default) The namespace is not enabled for Istio injection. Run kubectl label namespace default istio-injectionenabled to enable it, or kubectl label namespace default istio-injectiondisabled to explicitly mark it as not needing injection.# kubectl label namespace default istio-injectiondisabled
namespace/default labeled# kubectl apply -f bookinfo-gateway.yaml
gateway.networking.istio.io/bookinfo-gateway unchanged
virtualservice.networking.istio.io/bookinfo unchanged# istioctl analyze✔ No validation issues found when analyzing namespace: default.
3.3 确定入站IP
# kubectl get svc istio-ingressgateway -n istio-system
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
istio-ingressgateway LoadBalancer 10.104.41.124 pending 15021:32515/TCP,80:31183/TCP,443:32582/TCP,31400:30302/TCP,15443:32277/TCP 41h
[foothost-10-19-83-151 networking]$ 设置 EXTERNAL-IP 的值之后 您的环境就有了一个外部的负载均衡器可以将其用作入站网关。 但如果 EXTERNAL-IP 的值为 none (或者一直是 pending 状态) 则您的环境则没有提供可作为入站流量网关的外部负载均衡器。 在这个情况下您还可以用服务Service的节点端口访问网关。 如何配置自己的外部负载均衡器参考 https://www.cnblogs.com/yinzhengjie/p/17811466.htmlhttps://www.cnblogs.com/yinzhengjie/p/17811466.html环境中没有找到外部负载均衡器就选择一个节点来代替
# export INGRESS_PORT$(kubectl -n istio-system get service istio-ingressgateway -o jsonpath{.spec.ports[?(.namehttp2)].nodePort})
# echo $INGRESS_PORT
31183# export SECURE_INGRESS_PORT$(kubectl -n istio-system get service istio-ingressgateway -o jsonpath{.spec.ports[?(.namehttps)].nodePort})
# echo $SECURE_INGRESS_PORT
32582# export INGRESS_HOST$(kubectl get po -l istioingressgateway -n istio-system -o jsonpath{.items[0].status.hostIP})# echo $INGRESS_HOST
xx.xx.xx.xx# export GATEWAY_URL$INGRESS_HOST:$INGRESS_PORT
# echo $GATEWAY_URL
xx.xx.xx.xx:31183
3.4 外部验证
4 查看仪表盘
Istio 和几个遥测应用做了集成。 遥测能帮您了解服务网格的结构、展示网络的拓扑结构、分析网格的健康状态
4.1 Kiali及其插件
4.1.1 安装Kiali
# kubectl apply -f addons/
serviceaccount/grafana created
configmap/grafana created
service/grafana created
deployment.apps/grafana created
configmap/istio-grafana-dashboards created
configmap/istio-services-grafana-dashboards created
deployment.apps/jaeger created
service/tracing created
service/zipkin created
service/jaeger-collector created
serviceaccount/kiali created
configmap/kiali created
clusterrole.rbac.authorization.k8s.io/kiali-viewer created
clusterrole.rbac.authorization.k8s.io/kiali created
clusterrolebinding.rbac.authorization.k8s.io/kiali created
role.rbac.authorization.k8s.io/kiali-controlplane created
rolebinding.rbac.authorization.k8s.io/kiali-controlplane created
service/kiali created
deployment.apps/kiali created
serviceaccount/prometheus created
configmap/prometheus created
clusterrole.rbac.authorization.k8s.io/prometheus created
clusterrolebinding.rbac.authorization.k8s.io/prometheus created
service/prometheus created
deployment.apps/prometheus created 使用 kubectl rollout status 命令可以检查部署的滚动更新进度直到部署完成或超时。 如果部署正在进行滚动更新该命令将会显示更新的进度情况直到更新完成或超时。如果部署已经完成更新命令将会输出 deployment kiali successfully rolled out。 请注意这个命令只适用于使用 Deployment 进行部署管理的场景。如果你在其它类型的控制器上进行了部署例如 StatefulSet则需要使用相应的命令来检查滚动更新状态。 # kubectl rollout status deployment/kiali -n istio-system
deployment kiali successfully rolled out 4.1.2 修改kiali配置NodePort
# kubectl get svc -n istio-system
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
grafana ClusterIP 10.102.208.36 none 3000/TCP 179m
istio-egressgateway ClusterIP 10.100.225.194 none 80/TCP,443/TCP 2d
istio-ingressgateway LoadBalancer 10.104.41.124 pending 15021:32515/TCP,80:31183/TCP,443:32582/TCP,31400:30302/TCP,15443:32277/TCP 2d
istiod ClusterIP 10.104.226.207 none 15010/TCP,15012/TCP,443/TCP,15014/TCP 3d7h
jaeger-collector ClusterIP 10.96.191.105 none 14268/TCP,14250/TCP,9411/TCP 179m
kiali ClusterIP 10.98.246.20 none 20001/TCP,9090/TCP 179m
prometheus ClusterIP 10.110.173.109 none 9090/TCP 179m
tracing ClusterIP 10.106.222.123 none 80/TCP,16685/TCP 179m
zipkin ClusterIP 10.101.205.116 none 9411/TCP 179m 4.1.3 kubectl apply -f kiali.yaml
# kubectl apply -f kiali.yaml
serviceaccount/kiali unchanged
configmap/kiali unchanged
clusterrole.rbac.authorization.k8s.io/kiali-viewer unchanged
clusterrole.rbac.authorization.k8s.io/kiali unchanged
clusterrolebinding.rbac.authorization.k8s.io/kiali unchanged
role.rbac.authorization.k8s.io/kiali-controlplane unchanged
rolebinding.rbac.authorization.k8s.io/kiali-controlplane unchanged
service/kiali configured
deployment.apps/kiali unchanged# kubectl get svc -n istio-system
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
grafana ClusterIP 10.102.208.36 none 3000/TCP 3h2m
istio-egressgateway ClusterIP 10.100.225.194 none 80/TCP,443/TCP 2d
istio-ingressgateway LoadBalancer 10.104.41.124 pending 15021:32515/TCP,80:31183/TCP,443:32582/TCP,31400:30302/TCP,15443:32277/TCP 2d
istiod ClusterIP 10.104.226.207 none 15010/TCP,15012/TCP,443/TCP,15014/TCP 3d7h
jaeger-collector ClusterIP 10.96.191.105 none 14268/TCP,14250/TCP,9411/TCP 3h2m
kiali NodePort 10.98.246.20 none 20001:30853/TCP,9090:32008/TCP 3h2m
prometheus ClusterIP 10.110.173.109 none 9090/TCP 3h2m
tracing ClusterIP 10.106.222.123 none 80/TCP,16685/TCP 3h2m
zipkin ClusterIP 10.101.205.116 none 9411/TCP
4.1.4 访问kiali页面 4.1.5 造数据 要查看追踪数据必须向服务发送请求。请求的数量取决于 Istio 的采样率。 采样率在安装 Istio 时设置默认采样速率为 1%。在第一个跟踪可见之前您需要发送至少 100 个请求。 使用以下命令向 productpage 服务发送 100 个请求 for i in seq 1 100; do curl -s -o /dev/null http://$GATEWAY_URL/productpage; done for i in seq 1 100; do curl -s -o /dev/null http://10.19.83.151:31183/productpage; done
4.1.6 访问kiali页面 5.卸载
删除 Bookinfo 示例应用和配置, 参阅清理 Bookinfo。
Istio 卸载程序按照层次结构逐级的从 istio-system 命令空间中删除 RBAC 权限和所有资源。对于不存在的资源报错可以安全的忽略掉毕竟它们已经被分层地删除了。 $ kubectl delete -f samples/addons $ istioctl uninstall -y --purge 命名空间 istio-system 默认情况下并不会被移除。 不需要的时候使用下面命令移除它 $ kubectl delete namespace istio-system 指示 Istio 自动注入 Envoy 边车代理的标签默认也不移除。 不需要的时候使用下面命令移除它。 $ kubectl label namespace default istio-injection-
