包括或者排除部分流量绕过边车代理
参数:
traffic.sidecar.istio.io/includeOutboundIPRanges = .Values.global.proxy.includeIPRanges
traffic.sidecar.istio.io/excludeOutboundIPRanges = .Values.global.proxy.excludeIPRanges
traffic.sidecar.istio.io/includeOutboundPorts = .Values.global.proxy.includeOutboundPorts <-- missing
traffic.sidecar.istio.io/excludeOutboundPorts = .Values.global.proxy.excludeOutboundPorts
traffic.sidecar.istio.io/includeInboundPorts = .Values.global.proxy.includeInboundPorts <-- missing
traffic.sidecar.istio.io/excludeInboundPorts = .Values.global.proxy.excludeInboundPorts
例子:
$ istioctl install --set profile=minimal --set values.global.proxy.includeIPRanges="1.2.3.4/32"
This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
$ istioctl install --set profile=minimal --set values.global.proxy.excludeIPRanges="1.2.3.4/32"
This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
$ istioctl install --set profile=minimal --set values.global.proxy.includeOutboundPorts="1234,"
Run the command with the --force flag if you want to ignore the validation error and proceed.
Error: generate config: unknown field "includeOutboundPorts" in v1alpha1.ProxyConfig
$ istioctl install --set profile=minimal --set values.global.proxy.excludeOutboundPorts="1234,"
This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
$ istioctl install --set profile=minimal --set values.global.proxy.includeInboundPorts="1234,"
Run the command with the --force flag if you want to ignore the validation error and proceed.
Error: generate config: unknown field "includeInboundPorts" in v1alpha1.ProxyConfig
$ istioctl install --set profile=minimal --set values.global.proxy.excludeInboundPorts="1234,"
This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
网友评论