测试istio的NodePort的istio Gateway

前置

已安装istio并正常
安装样例文件

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.20/samples/httpbin/httpbin.yaml

使用istio apis在80端口配置Gateway

kubectl apply -f - <<EOF
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: httpbin-gateway
spec:
  selector:
    istio: ingressgateway # use Istio default gateway implementation
  servers:
  - port:
      number: 80
      name: http
      protocol: HTTP
    hosts:
    - "httpbin.example.com"
EOF

配置路由

kubectl apply -f - <<EOF
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: httpbin
spec:
  hosts:
  - "httpbin.example.com"
  gateways:
  - httpbin-gateway
  http:
  - match:
    - uri:
        prefix: /status
    - uri:
        prefix: /delay
    route:
    - destination:
        port:
          number: 8000
        host: httpbin
EOF

设置环境变量分几种情况:
helm安装的istio Ingress Gateway 名称和命名空间都是istio-ingress：

查看helm安装的istio:

helm ls -n istio-system

会列出以下资源:

NAME      	NAMESPACE   	REVISION	UPDATED                                	STATUS  	CHART        	APP VERSION
istio-base	istio-system	1       	2023-11-22 13:04:57.709170238 +0800 CST	deployed	base-1.20.0  	1.20.0
istiod    	istio-system	1       	2023-11-22 12:53:01.707353616 +0800 CST	deployed	istiod-1.20.0	1.20.0

导出ingress的svc名与命名空间名称

export INGRESS_NAME=istio-ingress
export INGRESS_NS=istio-ingress

yaml文件安装的istio Gateway: 默认的命名空间为istio-ingress, Service服务名称为istio-ingressgateway, 根据你的实际情况来修改

导出ingress的svc名与命名空间名称

export INGRESS_NAME=istio-ingress
export INGRESS_NS=istio-ingressgateway

设置端口: 命令含义:
获取istio-ingressgateway的http2 外部端口
获取istio-ingressgateway的https 外部端口
获取istio-ingressgateway的tcp 外部端口

export INGRESS_PORT=$(kubectl -n "${INGRESS_NS}" get service "${INGRESS_NAME}" -o jsonpath='{.spec.ports[?(@.name=="http2")].nodePort}')

export SECURE_INGRESS_PORT=$(kubectl -n "${INGRESS_NS}" get service "${INGRESS_NAME}" -o jsonpath='{.spec.ports[?(@.name=="https")].nodePort}')

export TCP_INGRESS_PORT=$(kubectl -n "${INGRESS_NS}" get service "${INGRESS_NAME}" -o jsonpath='{.spec.ports[?(@.name=="tcp")].nodePort}')

如果INGRESS_PORT设置失败, 尝试把http2替换为http 因为是NodePort类型, TCP_INGRESS_PORT可能没有对应的输出

资料

https://istio.io/latest/zh/docs/tasks/traffic-management/ingress/ingress-control/#using-node-ports-of-the-ingress-gateway-service