【k8s-1.34.2安装部署】十.gateway Api v1.4.0和istio安装

== 文章导航===

【k8s-1.34.2安装部署】一.系统初始化及k8s集群规划
【k8s-1.34.2安装部署】二.kubernets软件、证书、配置、脚本等文件准备
【k8s-1.34.2安装部署】三.etcd-v3.6.6 TLS版集群安装
【k8s-1.34.2安装部署】四.kubernets master组件kube-apiserver，kube-controller-manager，kube-scheduler安装
【k8s-1.34.2安装部署】五.worker端containerd2.2.1、kubelet-1.34.2安装
【k8s-1.34.2安装部署】六.企业级部署cilium-1.18.4网络插件
【k8s-1.34.2安装部署】七.coredns-v1.13.1安装
【k8s-1.34.2安装部署】八.metric-server-0.8.0安装
【k8s-1.34.2安装部署】九.k8s管理平台xkube安装部署
【k8s-1.34.2安装部署】十.gateway Api v1.4.0安装
【k8s-1.34.2安装部署】十一.metallb-v0.15.2安装

一.istio安装

第一步：安装客户端

1.从https://github.com/istio/istio/releases下载二进制文件放到/usr/local/bin下
2.验证： istioctl version
3.帮助文档地址：https://istio.io/latest/zh/docs/ambient/install/istioctl/

第二步：执行命令：istioctl install --set profile=ambient --set components.cni.enabled=false --skip-confirmation

二.gateway api 安装

试验版：kubectl apply --server-side -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.4.1/experimental-install.yaml

正式版：kubectl apply --server-side -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.4.1/standard-install.yaml

注:试验版本才会包含tcproute和udproute

三.示例创建

3.1.创建gateway的示例：

apiVersion: gateway.networking.k8s.io/v1 kind: Gateway metadata: name: my-gateway spec: gatewayClassName: istio listeners: - name: http protocol: HTTP port: 80

3.2.创建httproute示例

apiVersion: gateway.networking.k8s.io/v1 kind: HTTPRoute metadata: name: my-httproute2 spec: parentRefs: - name: my-gateway hostnames: - "t2.eeenet.net" rules: - matches: - path: type: PathPrefix value: /t2 backendRefs: - name: my-deployment port: 80 - matches: - headers: - type: Exact name: env value: test backendRefs: - name: one-deployment port: 80

3.3.创建grpcroute示例

apiVersion: gateway.networking.k8s.io/v1 kind: GRPCRoute metadata: name: my-grpcroute spec: parentRefs: - name: my-gateway hostnames: - "t3.pc.com.cn" rules: - matches: - method: service: com.example.User method: Login backendRefs: - name: my-deployment port: 80 - matches: - method: service: grpc.reflection.v1.ServerReflection backendRefs: - name: one-deployment port: 80

3.4.创建tcproute示例

apiVersion: gateway.networking.k8s.io/v1 kind: Gateway metadata: name: my-tcp-gateway spec: gatewayClassName: istio listeners: - name: memcached-t1 protocol: TCP port: 11211 allowedRoutes: kinds: - kind: TCPRoute - name: redis-t1 protocol: TCP port: 6379 allowedRoutes: kinds: - kind: TCPRoute --- apiVersion: gateway.networking.k8s.io/v1alpha2 kind: TCPRoute metadata: name: memcached-t1-tcproute spec: parentRefs: - name: my-tcp-gateway sectionName: memcached-t1 rules: - backendRefs: - name: memcached-t1-service port: 11211 --- apiVersion: gateway.networking.k8s.io/v1alpha2 kind: TCPRoute metadata: name: redis-t1-tcproute spec: parentRefs: - name: my-tcp-gateway sectionName: redis-t1 rules: - backendRefs: - name: redis-t1-service port: 6379

3.5.创建udproute示例

apiVersion: gateway.networking.k8s.io/v1 kind: Gateway metadata: name: my-udp-gateway namespace: kube-system spec: gatewayClassName: istio listeners: - name: udp-t1 protocol: UDP port: 53 allowedRoutes: kinds: - kind: UDPRoute --- apiVersion: gateway.networking.k8s.io/v1alpha2 kind: UDPRoute metadata: name: dns-t1-udproute namespace: kube-system spec: parentRefs: - name: my-udp-gateway sectionName: udp-t1 rules: - backendRefs: - name: kube-dns port: 53

三.注意事项

3.1.镜像下载失败问题

istio-cni-node： docker.io/istio/install-cni:1.28.0-distroless
ztunnel： docker.io/istio/ztunnel:1.28.0-distroless
istiod： docker.io/istio/pilot:1.28.0-distroless

对应可以下载的镜像地址：

docker.1panel.live/istio/install-cni:1.28.0-distroless
docker.1panel.live/istio/ztunnel:1.28.0-distroless
docker.1panel.live/istio/pilot:1.28.0-distroless
可以下载完上传到自己的镜像站