美文网首页
istio 边车流量的一些冷门配置

istio 边车流量的一些冷门配置

作者: 迪克dike | 来源:发表于2021-12-15 17:32 被阅读0次

    包括或者排除部分流量绕过边车代理
    参数:

    traffic.sidecar.istio.io/includeOutboundIPRanges = .Values.global.proxy.includeIPRanges
    traffic.sidecar.istio.io/excludeOutboundIPRanges = .Values.global.proxy.excludeIPRanges
    traffic.sidecar.istio.io/includeOutboundPorts    = .Values.global.proxy.includeOutboundPorts <-- missing
    traffic.sidecar.istio.io/excludeOutboundPorts    = .Values.global.proxy.excludeOutboundPorts
    traffic.sidecar.istio.io/includeInboundPorts     = .Values.global.proxy.includeInboundPorts <-- missing
    traffic.sidecar.istio.io/excludeInboundPorts     = .Values.global.proxy.excludeInboundPorts
    

    例子:

    $ istioctl install --set profile=minimal --set values.global.proxy.includeIPRanges="1.2.3.4/32"
    This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
    
    $ istioctl install --set profile=minimal --set values.global.proxy.excludeIPRanges="1.2.3.4/32"
    This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
    
    $ istioctl install --set profile=minimal --set values.global.proxy.includeOutboundPorts="1234,"
    Run the command with the --force flag if you want to ignore the validation error and proceed.
    Error: generate config: unknown field "includeOutboundPorts" in v1alpha1.ProxyConfig
    
    $ istioctl install --set profile=minimal --set values.global.proxy.excludeOutboundPorts="1234,"
    This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
    
    $ istioctl install --set profile=minimal --set values.global.proxy.includeInboundPorts="1234,"
    Run the command with the --force flag if you want to ignore the validation error and proceed.
    Error: generate config: unknown field "includeInboundPorts" in v1alpha1.ProxyConfig
    
    $ istioctl install --set profile=minimal --set values.global.proxy.excludeInboundPorts="1234,"
    This will install the Istio 1.11.2 minimal profile with ["Istio core" "Istiod"] components into the cluster. Proceed? (y/N)
    

    相关文章

      网友评论

          本文标题:istio 边车流量的一些冷门配置

          本文链接:https://www.haomeiwen.com/subject/gxypfrtx.html