[Service Mesh] 이스티오(istio)

Service Mesh

이스티오(istio)

서미스 매쉬 오픈소스

설치

• 이스티오 명령어(프로그램) 설치

  curl -L https://istio.io/downloadIstio | sh -
  echo "export PATH=$HOME/istio-버전/bin:$PATH" >> ~/.bashrc  # 위에 명령어 결과물에 버전이 나온다.
  source .bashrc
  istioctl --help
  

• 이스티오 컨트롤 플레인 설치하기

    istioctl x uninstall --purge  # 이스티오 삭제
    istioctl install --set components.cni.enabled=true -y
  

  컴포넌트가 생성되는걸 확인
  
  

Istio Automation Injection

• addon 설치
  

  kubectl apply -f istio-1.15.2/samples/addons/prometheus.yaml
  kubectl apply -f istio-1.15.2/samples/addons/kiali.yaml
  

• 레이블 지정
  해당하는 네임스페이스에 Istio를 적용시킨다.
  

  kubectl label ns 네임스페이스이름 istio-injection=enabled
  # ex) kubectl label ns default istio-injection=enabled
  

• 확인
  기존에 있던 디플로이먼트들을 재시작한 다음 파드들에게 istio가 잘 적용됐는지 확인한다.
  
  

• kiali 서비스 변경
  istio-system 네임스패이스 - 서비스 - kiali의 서비스타입을 ClusterIP에서 NodePort로 변경해준다.
  
  
  

• kiali 대시보드 접속
  http://마스터IP:kiali포트번호로 접속
  
  graph에서 연결된 default 네임스페이스가 잘 작동하는지 모니터링 해본다.
  
  

Istio 레이블 별로 묶기

backend-deployment.yml

apiVersion: apps/v1
kind: Deployment
metadata:
 name: backend-deployment
 labels:
   type: was
   app: backend
spec:
 selector:
   matchLabels:
    type: was
    app: backend
 replicas: 2
 template:
   metadata:
     labels:
       type: was
       app: backend
   spec:
    containers:
    - name: backend
      image: xc7230/backend:latest
      envFrom:
        - configMapRef:
            name: mysql-cm
        - secretRef:
            name: mysql-sec
      ports:
      - containerPort: 8000
      resources:
        requests:
          cpu: 100m
        limits:
          cpu: 200m

backend 서비스

apiVersion: v1
kind: Service
metadata:
  name: backend-svc
  labels:
    type: was
    app: backend  
spec:
  selector:
    type: was
    app: backend
  ports:
  - port: 8000
    targetPort: 8000

frontend-deployment.yml

apiVersion: apps/v1
kind: Deployment
metadata:
 name: frontend-deployment
 lables:
   type: web
   app: frontend
spec:
 selector:
   matchLabels:
     type: web
     app: frontend
 replicas: 2
 template:
   metadata:
     labels:
       type: web
       app: frontend
   spec:
    containers:
    - name: frontend
      image: xc7230/frontend:latest
      envFrom:
      ports:
      - containerPort: 80
      resources:
        requests:
          cpu: 100m
        limits:
          cpu: 200m

frontend 서비스

apiVersion: v1
kind: Service
metadata:
  name: frontend-svc
  labels:
    type: web
    app: frontend
spec:
  selector:
    type: web
    app: frontend
  ports:
    - name: http
      protocol: TCP
      port: 80
      targetPort: 80
    - name: api
      protocol: TCP
      port: 8080
      targetPort: 8080
  type: LoadBalancer

sql 파드 생성

apiVersion: apps/v1
kind: Deployment
metadata:
  name: mysql-deployment
  labels:
    type: web
    app: db
spec:
  selector:
    matchLabels:
      type: web
      app: db
  replicas: 1
  template:
    metadata:
      labels:
        type: web
        app: db
        version: latest
    spec:
      nodeSelector:
        kubernetes.io/hostname: node1
      containers:
      - name: container
        image: mysql:latest
        ports:
        - containerPort: 3306
        envFrom:
        - secretRef:
            name: mysql-sec
        volumeMounts:
        - name: mysql-pvc-pv
          mountPath: /var/lib/mysql
      volumes:
      - name : mysql-pvc-pv
        persistentVolumeClaim:
          claimName: mysql-pvc

sql 서비스 생성

apiVersion: v1
kind: Service
metadata:
  name: mysql-svc
  labels:
    type: web
    app: db
spec:
  selector:
    type: web
    app: db
  ports:
    - name: mysql
      protocol: TCP
      port: 3306
      targetPort: 3306

• kiali 대시보드 접속
  

https://feellikeghandi.tistory.com/