接上文《使用 k3s 搭建 cilium istio 实验环境》和 《istio-ingressgateway 学习》
一、暴露 hubble ui
通过 istio-ingressgateway 暴露 hubble ui 服务，执行以下步骤：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 | kubectl apply -f - <<EOF apiVersion: networking.istio.io/v1alpha3 kind: Gateway metadata: name: istio-gateway spec: selector: istio: ingressgateway # use Istio default gateway implementation servers: - port: number: 80 name: http protocol: HTTP hosts: - "hubble.k3s.local" --- apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: hubble-vs spec: hosts: - "hubble.k3s.local" gateways: - istio-gateway http: - match: - uri: prefix: / route: - destination: port: number: 80 host: hubble-ui.kube-system.svc.cluster.local EOF |
|---|
hubble ui 通过sub path 子路径这种访问方式有问题，这里通过子域名的方式访问，在本机 hosts 文件 配置如下内容
1 2 | istio-ingressgateway vpsIP hubble.k3s.local |
|---|
浏览器访问http://hubble.k3s.local:31782/（31782 为 istio-ingressgateway 的nodeport)
二、实验测试
1. Star Wars demo
部署 cilium 官方示例实例： Star Wars Demo ， 官方的 yaml 没有 arm 版本的镜像，这里稍作修改：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 | kubectl apply -f - <<EOF --- apiVersion: v1 kind: Service metadata: name: deathstar labels: app.kubernetes.io/name: deathstar spec: type: ClusterIP ports: - port: 80 selector: org: empire class: deathstar --- apiVersion: apps/v1 kind: Deployment metadata: name: deathstar labels: app.kubernetes.io/name: deathstar spec: replicas: 2 selector: matchLabels: org: empire class: deathstar template: metadata: labels: org: empire class: deathstar app.kubernetes.io/name: deathstar spec: containers: - name: deathstar image: docker.io/yuspin/starwars --- apiVersion: v1 kind: Pod metadata: name: tiefighter labels: org: empire class: tiefighter app.kubernetes.io/name: tiefighter spec: containers: - name: spaceship image: docker.io/wrype/netperf-latest --- apiVersion: v1 kind: Pod metadata: name: xwing labels: app.kubernetes.io/name: xwing org: alliance class: xwing spec: containers: - name: spaceship image: docker.io/wrype/netperf-latest EOF |
|---|
成功部署后，从两个宇宙飞船发出请求以模拟 一些流量。
1 2 3 4 5 | $ kubectl exec xwing -- curl -s -XPOST deathstar.default.svc.cluster.local/v1/request-landing Ship landed $ kubectl exec tiefighter -- curl -s -XPOST deathstar.default.svc.cluster.local/v1/request-landing Ship landed |
|---|
然后这些请求将在 hubble ui 显示为不同的 pod 间的服务调用
2. 检查各种网络流量
为了制造一些网络流量，循环运行 cilium 的连通性检测程序
1 | while true; do cilium connectivity test; done |
|---|
然后可以在 hubble ui，看到各种网络流量
