docker desktop<\/p>\n
\u67e5\u770b istio \u7248\u672c<\/p>\n
istioctl version --remote\r\nclient version: 1.5.1\r\ncontrol plane version: 1.4.0\r\ndata plane version: 1.4.0 (114 proxies)\r\n<\/pre>\nbin\/istioctl manifest versions\r\nOperator version is 1.4.5.\r\n\r\nThe following installation package versions are recommended for use with this version of the operator:\r\n 1.4.3\r\n\r\nThe following installation package versions are supported for upgrade by this version of the operator:\r\n >=1.3.3\r\n <1.6\r\n<\/pre>\nproxy \u72b6\u6001<\/p>\n
istioctl proxy-status\r\n<\/pre>\n\u67e5\u770b istio-proxy \u7684\u914d\u7f6e<\/p>\n
kubectl -n istio-system exec istio-ingressgateway-7f648d44cf-dkdkp -c istio-proxy -- curl -s 127.0.0.1:15000\/help\r\nadmin commands are:\r\n \/: Admin home page\r\n \/certs: print certs on machine\r\n \/clusters: upstream cluster status\r\n \/config_dump: dump current Envoy configs (experimental)\r\n \/contention: dump current Envoy mutex contention stats (if enabled)\r\n \/cpuprofiler: enable\/disable the CPU profiler\r\n \/drain_listeners: drain listeners\r\n \/healthcheck\/fail: cause the server to fail health checks\r\n \/healthcheck\/ok: cause the server to pass health checks\r\n \/heapprofiler: enable\/disable the heap profiler\r\n \/help: print out list of admin commands\r\n \/hot_restart_version: print the hot restart compatibility version\r\n \/listeners: print listener info\r\n \/logging: query\/change logging levels\r\n \/memory: print current allocation\/heap usage\r\n \/quitquitquit: exit the server\r\n \/ready: print server state, return 200 if LIVE, otherwise return 503\r\n \/reset_counters: reset all counters to zero\r\n \/runtime: print runtime values\r\n \/runtime_modify: modify runtime values\r\n \/server_info: print server version\/status information\r\n \/stats: print server stats\r\n \/stats\/prometheus: print server stats in prometheus format\r\n \/stats\/recentlookups: Show recent stat-name lookups\r\n \/stats\/recentlookups\/clear: clear list of stat-name lookups and counter\r\n \/stats\/recentlookups\/disable: disable recording of reset stat-name lookup names\r\n \/stats\/recentlookups\/enable: enable recording of reset stat-name lookup names\r\n\r\n<\/pre>\n\u67e5\u770b dashboard<\/p>\n
istioctl dashboard --help\r\nAccess to Istio web UIs\r\n\r\nUsage:\r\n istioctl dashboard [flags]\r\n istioctl dashboard [command]\r\n\r\nAliases:\r\n dashboard, dash, d\r\n\r\nAvailable Commands:\r\n controlz Open ControlZ web UI\r\n envoy Open Envoy admin web UI\r\n grafana Open Grafana web UI\r\n jaeger Open Jaeger web UI\r\n kiali Open Kiali web UI\r\n prometheus Open Prometheus web UI\r\n zipkin Open Zipkin web UI\r\n\r\nFlags:\r\n -h, --help help for dashboard\r\n\r\nGlobal Flags:\r\n --context string The name of the kubeconfig context to use\r\n -i, --istioNamespace string Istio system namespace (default \"istio-system\")\r\n -c, --kubeconfig string Kubernetes configuration file\r\n --log_output_level string Comma-separated minimum per-scope logging level of messages to output, in the form of: , : ,... where scope can be one of [ads, all, analysis, attributes, authn, cache, citadelclient, configmapcontroller, default, googleca, grpcAdapter, installer, mcp, model, patch, processing, rbac, resource, sds, secretfetcher, source, stsclient, tpath, translator, util, validation, vault] and level can be one of [debug, info, warn, error, fatal, none] (default \"default:info,validation:error,processing:error,source:error,analysis:warn,installer:warn,translator:warn\")\r\n -n, --namespace string Config namespace\r\n\r\nUse \"istioctl dashboard [command] --help\" for more information about a command.\r\n<\/level><\/scope><\/level><\/scope><\/pre>\n \u67e5\u770b proxy config, \u7f29\u5199 pc, \u67e5\u770b\u6307\u5b9a pod \u7684istio-proxy\u7684\u4fdd\u5b58\u7684\u67d0\u670d\u52a1\u7684endpoint<\/p>\n
istioctl proxy-config endpoint servicefoo.app | grep servicebar\r\n<\/pre>\n\u67e5\u770b authn<\/p>\n
istioctl authn tls-check istio-ingressgateway-7f837d44cf-f6vdm.istio-system\r\n\r\n\r\n<\/pre>\n\u66f4\u6539\u65e5\u5fd7\u7ea7\u522b\u4e3a debug<\/p>\n
curl -X POST http:\/\/localhost:15000\/logging?level=debug<\/pre>\ncurl http:\/\/localhost:15000\/server_info\r\n{\r\n \"version\": \"07581234567ae48193a43ff6d86572968ae00e7\/1.12.0\/Clean\/RELEASE\/BoringSSL\",\r\n \"state\": \"LIVE\",\r\n \"hot_restart_version\": \"11.104\",\r\n \"command_line_options\": {\r\n \"base_id\": \"0\",\r\n \"concurrency\": 8,\r\n \"config_path\": \"\/etc\/istio\/proxy\/envoy-rev1.json\",\r\n \"config_yaml\": \"\",\r\n \"allow_unknown_static_fields\": false,\r\n \"reject_unknown_dynamic_fields\": false,\r\n \"admin_address_path\": \"\",\r\n \"local_address_ip_version\": \"v4\",\r\n \"log_level\": \"warning\",\r\n \"component_log_level\": \"misc:error\",\r\n \"log_format\": \"[Envoy (Epoch 1)] [%Y-%m-%d %T.%e][%t][%l][%n] %v\",\r\n \"log_path\": \"\",\r\n \"service_cluster\": \"istio-ingressgateway\",\r\n \"service_node\": \"router~10.74.24.9~istio-ingressgateway-7f123456cf-9qrvk.istio-system~istio-system.svc.cluster.local\",\r\n \"service_zone\": \"\",\r\n \"mode\": \"Serve\",\r\n \"max_stats\": \"0\",\r\n \"max_obj_name_len\": \"0\",\r\n \"disable_hot_restart\": false,\r\n \"enable_mutex_tracing\": false,\r\n \"restart_epoch\": 1,\r\n \"cpuset_threads\": false,\r\n \"file_flush_interval\": \"10s\",\r\n \"drain_time\": \"45s\",\r\n \"parent_shutdown_time\": \"60s\"\r\n },\r\n \"uptime_current_epoch\": \"275710s\",\r\n \"uptime_all_epochs\": \"815942s\"\r\n}\r\n<\/pre>\nPodDisruptionBudget \u7b56\u7565<\/p>\n
kubectl get PodDisruptionBudget -n istio-system [git:master] ✖ \r\nNAME MIN AVAILABLE MAX UNAVAILABLE ALLOWED DISRUPTIONS AGE\r\ningressgateway 1 N\/A 1 208d\r\nistio-citadel 1 N\/A 0 208d\r\nistio-egressgateway 1 N\/A 1 208d\r\nistio-galley 1 N\/A 0 208d\r\nistio-ingressgateway 1 N\/A 1 208d\r\nistio-metrics-ingressgateway 1 N\/A 1 208d\r\nistio-pilot 1 N\/A 1 208d\r\nistio-policy 1 N\/A 1 208d\r\nistio-sidecar-injector 1 N\/A 0 208d\r\nistio-telemetry 1 N\/A 1 208d\r\n<\/pre>\nistio \u8bc1\u4e66\u8fc7\u671f\u65f6\u95f4<\/p>\n
root-cert.pem \u5341\u5e74
\nca-cert.pem \u4e24\u5e74<\/p>\n","protected":false},"excerpt":{"rendered":"docker desktop \u67e5\u770b istio \u7248\u672c istioctl version –remote client version: 1.5.1 control plane version: 1.4.0 data plane version: 1.4.0 (114 proxies) bin\/istioctl manifest versions Operator version is 1.4.5. The following installation package versions are recommended for use with this version of the operator: 1.4.3 The following installation package versions are supported for upgrade by this […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[192],"tags":[],"class_list":["post-8769","post","type-post","status-publish","format-standard","hentry","category-istio"],"_links":{"self":[{"href":"https:\/\/jpuyy.com\/index.php?rest_route=\/wp\/v2\/posts\/8769","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jpuyy.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jpuyy.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jpuyy.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/jpuyy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8769"}],"version-history":[{"count":14,"href":"https:\/\/jpuyy.com\/index.php?rest_route=\/wp\/v2\/posts\/8769\/revisions"}],"predecessor-version":[{"id":9219,"href":"https:\/\/jpuyy.com\/index.php?rest_route=\/wp\/v2\/posts\/8769\/revisions\/9219"}],"wp:attachment":[{"href":"https:\/\/jpuyy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8769"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jpuyy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8769"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jpuyy.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8769"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}