istio

https://istio.io/latest/docs/setup/getting-started/
https://istio.kpingfan.com/01-setup/
## 核心功能

![](/media/202401/2024-01-17_233943_5967810.5531812096616637.png)

## 核心资源 CRD
* 虚拟服务 virtual service
* 目标规则 Destination rule
* 网关 gateway
* 服务入口 service entry
* sidecar

dr可以理解为定义道路 vs可以理解为路牌 或者红绿灯
### virtual service

![](/media/202401/2024-01-18_153104_8270920.12674526724877688.png)
### desrination rule

![](/media/202401/2024-01-18_153156_4173620.9576520531173036.png)
### gateway

![](/media/202401/2024-01-18_153317_3400140.7786484011341318.png)
### service entry

![](/media/202401/2024-01-18_153415_9636960.6302789149645216.png)
## 下载istio
```
curl -L https://istio.io/downloadIstio | sh -
```

## install istio

![](/media/202401/2024-01-18_160138_9665720.1607657707391169.png)
```
[root@master ~]# istioctl  profile list
Istio configuration profiles:
    ambient
    default  #生产可用
    demo   #测试可用
    empty
    external
    minimal
    openshift
    preview
    remote
```
```
# install 
istioctl install --set profile=demo -y

# istio 会在 配置的命名空间下 的pod中，自动注入一个istio-proxy sidecar
kubectl label namespace default istio-injection=enabled

kubectl get ns --show-labels
NAME                                   STATUS        AGE   LABELS
default                                Active        46d   istio-injection=enabled,kubernetes.io/metadata.name=default
```