GoWiki | k8s

# Istio

## Installation

```
curl -s -L https://github.com/istio/istio/releases/download/1.5.2/istioctl-1.5.2-linux.tar.gz >/tmp/istioctl-1.5.2-linux.tar.gz
[[ $(sha256sum /tmp/istioctl-1.5.2-linux.tar.gz|cut -d" " -f1) = "756956f182bdd15c92b218fd9de4b3f75486a13535d13288fae9024181afd71a" ]] && {
tar xfz /tmp/istioctl-1.5.2-linux.tar.gz -C /usr/bin istioctl
rm -rf /tmp/istioctl-1.5.2-linux.tar.gz
echo "istioctl install successful"
} || echo "checksum invalid"
```

```
istioctl manifest generate \
--set addonComponents.kiali.enabled=true \
--set components.citadel.enabled=true \
--set components.cni.enabled=true \
--set components.galley.enabled=true \
--set components.pilot.enabled=true \
--set components.policy.enabled=true \
--set components.sidecarInjector.enabled=true \
--set values.global.k8sIngress.enabled=true \
--set values.global.mtls.enabled=true \
--set values.kiali.ingress.enabled=true \
--set values.tracing.ingress.enabled=true \
> /etc/kubernetes/istio.yaml
kubectl apply -f /etc/kubernetes/istio.yaml
```

## Installation 1.6

```
curl -s -L https://storage.googleapis.com/istio-release/releases/1.6.0-beta.0/istioctl-1.6.0-beta.0-linux-amd64.tar.gz >/tmp/istioctl-1.6.0-beta.0-linux-amd64.tar.gz
[[ $(sha256sum /tmp/istioctl-1.6.0-beta.0-linux-amd64.tar.gz|cut -d" " -f1) = "40f58e7b26d27afb475915f613b24f4b4cd58713a8146d8162d58ea13d210e64" ]] && {
tar xfz /tmp/istioctl-1.6.0-beta.0-linux-amd64.tar.gz -C /usr/bin istioctl
rm -rf /tmp/istioctl-1.6.0-beta.0-linux-amd64.tar.gz
echo "istioctl install successful"
} || echo "checksum invalid"
```

```
kubectl create namespace istio-system
# admin/admin
kubectl apply -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: kiali
  namespace: istio-system
  labels:
    app: kiali
type: Opaque
data:
  username: YWRtaW4=
  passphrase: YWRtaW4=
EOF

istioctl manifest generate \
--set addonComponents.kiali.enabled=true \
--set components.citadel.enabled=true \
--set components.cni.enabled=true \
--set components.galley.enabled=true \
--set components.pilot.enabled=true \
--set components.policy.enabled=true \
--set components.sidecarInjector.enabled=true \
--set components.telemetry.enabled=true \
--set values.kiali.createDemoSecret=true \
--set values.kiali.dashboard.auth.strategy=login \
--set values.pilot.policy.enabled=true \
> /etc/kubernetes/istio.yaml
kubectl apply -f /etc/kubernetes/istio.yaml
```