kubernetes - 如何将 header 添加到从源Pod到目标Pod的每个请求中？

Question

我正在尝试部署此处描述的BookInfo应用程序:https://istio.io/docs/examples/bookinfo/

而且，根据本教程，我正在基于标题“最终用户:jason”路由请求。 https://istio.io/docs/tasks/traffic-management/request-routing/

根据本教程，一旦您登录，产品微服务就会添加一个请求 header “最终用户:jason” 。

我希望它在所有情况下都发送此 header 。换句话说，对于从产品微服务中发出的所有请求，无论请求到达何处，我都希望附加此 header 。

我该如何实现？



编辑

我根据以下给出的建议创建了以下内容。由于某种原因，流量始终会流向两个版本的产品。这是我的所有配置。

##################################################################################################
# Details service
##################################################################################################
apiVersion: v1
kind: Service
metadata:
 name: details
 labels:
 app: details
 service: details
spec:
 ports:
 - port: 9080
 name: http
 selector:
 app: details
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
 name: details-v1
 labels:
 app: details
 version: v1
spec:
 replicas: 1
 template:
 metadata:
 labels:
 app: details
 version: v1
 spec:
 containers:
 - name: details
 image: istio/examples-bookinfo-details-v1:1.13.0
 imagePullPolicy: IfNotPresent
 ports:
 - containerPort: 9080
---
##################################################################################################
# Ratings service
##################################################################################################
apiVersion: v1
kind: Service
metadata:
 name: ratings
 labels:
 app: ratings
 service: ratings
spec:
 ports:
 - port: 9080
 name: http
 selector:
 app: ratings
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
 name: ratings-v1
 labels:
 app: ratings
 version: v1
spec:
 replicas: 1
 template:
 metadata:
 labels:
 app: ratings
 version: v1
 spec:
 containers:
 - name: ratings
 image: istio/examples-bookinfo-ratings-v1:1.13.0
 imagePullPolicy: IfNotPresent
 ports:
 - containerPort: 9080
---
##################################################################################################
# Reviews service
##################################################################################################
apiVersion: v1
kind: Service
metadata:
 name: reviews
 labels:
 app: reviews
 service: reviews
spec:
 ports:
 - port: 9080
 name: http
 selector:
 app: reviews
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
 name: reviews-v1
 labels:
 app: reviews
 version: v1
spec:
 replicas: 1
 template:
 metadata:
 labels:
 app: reviews
 version: v1
 spec:
 containers:
 - name: reviews
 image: istio/examples-bookinfo-reviews-v1:1.13.0
 imagePullPolicy: IfNotPresent
 ports:
 - containerPort: 9080
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
 name: reviews-v2
 labels:
 app: reviews
 version: v2
spec:
 replicas: 1
 template:
 metadata:
 labels:
 app: reviews
 version: v2
 spec:
 containers:
 - name: reviews
 image: istio/examples-bookinfo-reviews-v2:1.13.0
 imagePullPolicy: IfNotPresent
 ports:
 - containerPort: 9080
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
 name: reviews-v3
 labels:
 app: reviews
 version: v3
spec:
 replicas: 1
 template:
 metadata:
 labels:
 app: reviews
 version: v3
 spec:
 containers:
 - name: reviews
 image: istio/examples-bookinfo-reviews-v3:1.13.0
 imagePullPolicy: IfNotPresent
 ports:
 - containerPort: 9080
---
##################################################################################################
# Productpage services
##################################################################################################
apiVersion: v1
kind: Service
metadata:
 name: productpage
 labels:
 app: productpage
 service: productpage
spec:
 ports:
 - port: 9080
 name: http
 selector:
 app: productpage
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
 name: productpage-v1
 labels:
 app: productpage
 version: v1
spec:
 replicas: 1
 template:
 metadata:
 labels:
 app: productpage
 version: v1
 spec:
 containers:
 - name: productpage
 image: istio/examples-bookinfo-productpage-v1:1.13.0
 imagePullPolicy: IfNotPresent
 ports:
 - containerPort: 9080
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
 name: productpage-v2
 labels:
 app: productpage
 version: v2
spec:
 replicas: 1
 template:
 metadata:
 labels:
 app: productpage
 version: v2
 spec:
 containers:
 - name: productpage
 image: istio/examples-bookinfo-productpage-v1:1.13.0
 imagePullPolicy: IfNotPresent
 ports:
 - containerPort: 9080
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
 name: bookinfo-gateway
spec:
 selector:
 istio: ingressgateway # use istio default controller
 servers:
 - port:
 number: 80
 name: http
 protocol: HTTP
 hosts:
 - "*"
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
 name: bookinfo
spec:
 hosts:
 - "*"
 gateways:
 - bookinfo-gateway
 http:
 - match:
 - uri:
 exact: /productpage
 - uri:
 exact: /login
 - uri:
 exact: /logout
 - uri:
 prefix: /api/v1/products
 route:
 - destination:
 host: productpage
 port:
 number: 9080
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
 name: productpage
spec:
 host: productpage
 subsets:
 - name: v1
 labels:
 version: v1
 - name: v2
 labels:
 version: v2
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
 name: reviews
spec:
 host: reviews
 subsets:
 - name: v1
 labels:
 version: v1
 - name: v2
 labels:
 version: v2
 - name: v3
 labels:
 version: v3
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
 name: ratings
spec:
 host: ratings
 subsets:
 - name: v1
 labels:
 version: v1
 - name: v2
 labels:
 version: v2
 - name: v2-mysql
 labels:
 version: v2-mysql
 - name: v2-mysql-vm
 labels:
 version: v2-mysql-vm
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
 name: details
spec:
 host: details
 subsets:
 - name: v1
 labels:
 version: v1
 - name: v2
 labels:
 version: v2
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
 name: productpage
spec:
 hosts:
 - productpage
 http:
 - match:
 - headers:
 end-user:
 exact: jason
 route:
 - destination:
 host: productpage
 subset: v2
 - route:
 - destination:
 host: productpage
 subset: v1
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
 name: reviews
spec:
 hosts:
 - reviews
 http:
 - match:
 - headers:
 end-user:
 exact: jason
 route:
 - destination:
 host: reviews
 subset: v2
 - route:
 - destination:
 host: reviews
 subset: v1
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
 name: ratings
spec:
 hosts:
 - ratings
 http:
 - route:
 - destination:
 host: ratings
 subset: v1
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
 name: details
spec:
 hosts:
 - details
 http:
 - route:
 - destination:
 host: details
 subset: v1
---

Answer 1

正如Anoop在评论中提到的那样，他想部署2个productpage应用

首先只会路由以审核v1

仅第二条评论v2的路线

因此，我对istio docs中的productpage进行了快速测试，并且您必须配置虚拟服务和目标规则才能实现这一目标。

安装 istio bookinfo
部署和服务

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.5/samples/bookinfo/platform/kube/bookinfo.yaml

网关和虚拟服务

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.5/samples/bookinfo/networking/bookinfo-gateway.yaml

就像 here

Before you can use Istio to control the Bookinfo version routing, you need to define the available versions, called subsets, in destination rules.

If you did not enable mutual TLS, execute this command:

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.5/samples/bookinfo/networking/destination-rule-all.yaml

If you did enable mutual TLS, execute this command:

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.5/samples/bookinfo/networking/destination-rule-all-mtls.yaml

然后只需添加您的虚拟服务
您可以像此 example一样使用每个微服务的v1，也可以只评论v1。
因此，对于每个使用v1的微服务来说，

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.5/samples/bookinfo/networking/virtual-service-all-v1.yaml

仅用于评论v1

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: reviews
spec:
  hosts:
  - reviews
  http:
  - route:
    - destination:
        host: reviews
        subset: v1

这就是您需要为第一个productpage应用程序执行的所有操作。

第二产品页面应用
您必须执行与第二个完全相同的操作，这里唯一的更改是虚拟服务以匹配子集v2，当然，如果要部署两个服务，我建议使用2个 namespace 并分开它们，更改虚拟服务中的 namespace ，部署，网关等

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: reviews
spec:
  hosts:
  - reviews
  http:
  - route:
    - destination:
        host: reviews
        subset: v2

header
如 istio documentation所述，您可以使用

request Header -> manipulation rules to apply before forwarding a request to the destination service

或

response Header -> manipulation rules to apply before returning a response to the caller

我不确定您需要什么，此 example显示了如何向每个请求添加响应 header ，您可以将其添加到虚拟服务中。在下面的示例链接中有更多关于它的信息。

编辑

我根据添加的图片提供了此虚拟服务，因此，每次以jason身份登录时，它都会将您重定向到产品v2并审阅v2，默认情况下，我会保留等级和详细信息v1。

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: productpage
spec:
  hosts:
  - productpage
  http:
  - match:
    - headers:
        end-user:
          exact: jason
    route:
    - destination:
        host: productpage
        subset: v2
  - route:
    - destination:
        host: productpage
        subset: v1

---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: reviews
spec:
  hosts:
  - reviews
  http:
  - match:
    - headers:
        end-user:
          exact: jason
    route:
    - destination:
        host: reviews
        subset: v2
  - route:
    - destination:
        host: reviews
        subset: v1

---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: ratings
spec:
  hosts:
  - ratings
  http:
  - route:
    - destination:
        host: ratings
        subset: v1
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: details
spec:
  hosts:
  - details
  http:
  - route:
    - destination:
        host: details
        subset: v1
---