kubernetes-helm - 用于安装 istio 的 Helm 存储库

Question

我正在尝试安装 istio。如果我从 github 克隆 repo，我可以轻松打包 helm chart，但我只是想知道是否有可以使用的 helm chart repo？

Answer 1

如果您正在寻找一种方法来安装高于 1.8.0 的 istio 版本，那么有个好消息。
根据 documentation掌 Helm 支持又回来了，目前处于 alpha 阶段。

We’ve added support for installing Istio with Helm 3. This includes both in-place upgrades and canary deployment of new control planes, after installing 1.8 or later. Helm 3 support is currently Alpha, so please try it out and give your feedback.

有 istio documentation关于使用 Helm 3 安装 Istio，安装 Istio 不支持 Helm 2。
有先决条件:

Download the Istio release

Perform any necessary platform-specific setup

Check the Requirements for Pods and Services

Install a Helm client with a version higher than 3.1.1

istio 1.8.1的安装步骤如下:

Note that the default chart configuration uses the secure third party tokens for the service account token projections used by Istio proxies to authenticate with the Istio control plane. Before proceeding to install any of the charts below, you should verify if third party tokens are enabled in your cluster by following the steps describe here. If third party tokens are not enabled, you should add the option --set global.jwtPolicy=first-party-jwt to the Helm install commands. If the jwtPolicy is not set correctly, pods associated with istiod, gateways or workloads with injected Envoy proxies will not get deployed due to the missing istio-token volume.

1.下载 Istio 发行版并将目录更改为发行版包的根目录，然后按照以下说明进行操作。

curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.8.1 sh -
cd istio-1.8.1

2.为Istio组件创建命名空间istio-system:

kubectl create namespace istio-system

3.安装包含Istio控制平面使用的集群范围资源的Istio基础图表:

helm install -n istio-system istio-base manifests/charts/base

4.安装部署 istiod 服务的 Istio 发现图表:

helm install --namespace istio-system istiod manifests/charts/istio-control/istio-discovery \
    --set global.hub="docker.io/istio" --set global.tag="1.8.1"

5.安装包含入口网关组件的 Istio 入口网关图表:

helm install --namespace istio-system istio-ingress manifests/charts/gateways/istio-ingress \
    --set global.hub="docker.io/istio" --set global.tag="1.8.1"

6.(可选)安装包含导出网关组件的 Istio 导出网关图表:

helm install --namespace istio-system istio-egress manifests/charts/gateways/istio-egress \
    --set global.hub="docker.io/istio" --set global.tag="1.8.1"

7.验证 istio-system 命名空间中的所有 Kubernetes pod 都已部署并具有 Running 的 STATUS:

kubectl get pods -n istio-system