deploy.md · HuaweiCloudDeveloper/huaweicloud-istio-k8s-saas-housekeeper

# 项目部署<a name="ZH-CN_TOPIC_0000001504472473"></a>

## 前提条件<a name="section18684194914528"></a>

外网环境可忽略此步骤，内网环境需要一台华为云ECS的windows服务器，参数如下：

<a name="table13681165125111"></a>
<table><thead align="left"><tr id="row1268111513519"><th class="cellrowborder" valign="top" width="49.93%" id="mcps1.1.3.1.1"><p id="p14681951105112"><a name="p14681951105112"></a><a name="p14681951105112"></a>类型</p>
</th>
<th class="cellrowborder" valign="top" width="50.07%" id="mcps1.1.3.1.2"><p id="p186811751195120"><a name="p186811751195120"></a><a name="p186811751195120"></a>规格</p>
</th>
</tr>
</thead>
<tbody><tr id="row17681251155119"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p66811151125110"><a name="p66811151125110"></a><a name="p66811151125110"></a>计费模式</p>
</td>
<td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p668145175117"><a name="p668145175117"></a><a name="p668145175117"></a>按需计费</p>
</td>
</tr>
<tr id="row0681165165111"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p36821751165115"><a name="p36821751165115"></a><a name="p36821751165115"></a>CPU</p>
</td>
<td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p15682155145110"><a name="p15682155145110"></a><a name="p15682155145110"></a>X86</p>
</td>
</tr>
<tr id="row06821051205115"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p19682175175117"><a name="p19682175175117"></a><a name="p19682175175117"></a>操作系统</p>
</td>
<td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p76821351175119"><a name="p76821351175119"></a><a name="p76821351175119"></a>windows/ 2019标准版64位 英文</p>
</td>
</tr>
<tr id="row2558195113543"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p1655885195416"><a name="p1655885195416"></a><a name="p1655885195416"></a>弹性IP</p>
</td>
<td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p205585511543"><a name="p205585511543"></a><a name="p205585511543"></a>需要</p>
</td>
</tr>
<tr id="row111309207548"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p6131320195410"><a name="p6131320195410"></a><a name="p6131320195410"></a>VPC</p>
</td>
<td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p21312206544"><a name="p21312206544"></a><a name="p21312206544"></a>新建</p>
</td>
</tr>
</tbody>
</table>

## 整体流程：<a name="section19656105654711"></a>

1.  创建CCE集群，参考[步骤1](#zh-cn_topic_0000001496017745_li1554010324106)；CCE集群中安装Istio,参考[步骤2](#li187726401194)；购买华为云组件服务RabbitMq，Mysql。参考[步骤3](#zh-cn_topic_0000001496017745_li1225615565332)。
2.  项目部署参考[步骤4](#li126171154510)。
3.  配置域名与ELB，ELB与Istio网关绑定，参考[步骤7](#zh-cn_topic_0000001496017745_li13887555142619)。
4.  测试访问以及访问Kiali插件，参考[步骤8](#li55641323174115)。

## 操作步骤<a name="section56177192525"></a>

1.  <a name="zh-cn_topic_0000001496017745_li1554010324106"></a>**购买CCE集群，关键参数如下表所示：**

<a name="table1731832921415"></a>
    <table><thead align="left"><tr id="row12318122910145"><th class="cellrowborder" valign="top" width="49.93%" id="mcps1.1.3.1.1"><p id="p1531913299144"><a name="p1531913299144"></a><a name="p1531913299144"></a>类型</p>
    </th>
    <th class="cellrowborder" valign="top" width="50.07%" id="mcps1.1.3.1.2"><p id="p2319192921419"><a name="p2319192921419"></a><a name="p2319192921419"></a>规格</p>
    </th>
    </tr>
    </thead>
    <tbody><tr id="row1946924005419"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p6470104011546"><a name="p6470104011546"></a><a name="p6470104011546"></a>计费模式</p>
    </td>
    <td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p1047034012541"><a name="p1047034012541"></a><a name="p1047034012541"></a>按需计费</p>
    </td>
    </tr>
    <tr id="row19319172951415"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p18319132951418"><a name="p18319132951418"></a><a name="p18319132951418"></a>集群版本</p>
    </td>
    <td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p2319112901414"><a name="p2319112901414"></a><a name="p2319112901414"></a>1.21</p>
    </td>
    </tr>
    <tr id="row15319172941411"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p1531962981411"><a name="p1531962981411"></a><a name="p1531962981411"></a>网络模型</p>
    </td>
    <td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p1331912293142"><a name="p1331912293142"></a><a name="p1331912293142"></a>VPC（<span>与其它服务相同</span>）</p>
    </td>
    </tr>
    <tr id="row720813452189"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p11208134511185"><a name="p11208134511185"></a><a name="p11208134511185"></a>集群规模</p>
    </td>
    <td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p820818450185"><a name="p820818450185"></a><a name="p820818450185"></a>50节点</p>
    </td>
    </tr>
    <tr id="row1550718546187"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p1650717549185"><a name="p1650717549185"></a><a name="p1650717549185"></a>高可用</p>
    </td>
    <td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p750717545187"><a name="p750717545187"></a><a name="p750717545187"></a>是</p>
    </td>
    </tr>
    <tr id="row431972919146"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p931912911144"><a name="p931912911144"></a><a name="p931912911144"></a>节点参数(<span>需要设置弹性IP</span>)</p>
    </td>
    <td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p101972021171710"><a name="p101972021171710"></a><a name="p101972021171710"></a>(8核 | 16GiB)✖2</p>
    </td>
    </tr>
    <tr id="row19378531161611"><td class="cellrowborder" valign="top" width="49.93%" headers="mcps1.1.3.1.1 "><p id="p1644116262464"><a name="p1644116262464"></a><a name="p1644116262464"></a>节点系统选择</p>
    </td>
    <td class="cellrowborder" valign="top" width="50.07%" headers="mcps1.1.3.1.2 "><p id="p344132614462"><a name="p344132614462"></a><a name="p344132614462"></a>Euler2.5</p>
    </td>
    </tr>
    </tbody>
    </table>

#### **CCE集群中安装开源Istio**

-  配置kubectl，CCE集群中下载kubeconfig.json文件。

![](img/deploy/kubectl.png)

将文件拷贝至任意节点usr/local目录下。

```
cd usr/local
```

- 进入CCE集群节点，执行命令配置kubectl。

```
mkdir -p $HOME/.kube 
mv -f kubeconfig.json $HOME/.kube/config
```

- 验证命令。

```
kubectl cluster-info
```

- 安装成功显示如下图。

![](img/deploy/cluster-info.png)

- 下载开源Istio安装

```
wget https://storage.googleapis.com/istio-release/releases/1.16.2/istio-1.16.2-linux-amd64.tar.gz
```

- 解压

```
tar -zxvf istio-1.16.2-linux-amd64.tar.gz
```

- 增加istioctl环境变量，执行如下命令。

```
vim /etc/profile
```

- 在文件的最后增加如下内容：

```
export ISTIO=/usr/local/istio-1.16.2
export PATH=${ISTIO}/bin:${PATH}
```

- 执行生效命令

```
source /etc/profile
```

- 安装Istio

```
istioctl install --set profile=demo -y
```

- 安装成功如下图

![](img/deploy/istioctlInstall.png)

- 安装开源插件kiali用于观测

```
cd /usr/local/istio-1.16.2
kubectl apply -f samples/addons
kubectl rollout status deployment/kiali -n istio-system
```
- 修改kiali为节点访问

```
kubectl edit svc kiali -n istio-system
```

![](img/deploy/editKiali.png)

- 进入CCE集群，将工作负载中的命名空间切换到istio-system。查看Kiali工作负载所在的节点和端口，访问Kiali页面。

进入工作负载详情页面。

-   实例列表查看节点IP.

![](img/deploy/kialiNodeIP.png)

-   访问方式中查看转发到20001的端口$kiali的默认访问端口为20001$。

![](img/deploy/kialiNodePort.png)

如上图所示访问地址就是 192.168.222.25:32452

- 在浏览器中输入访问地址，访问成功，如下图所示：

![](img/deploy/kialiConsole.png)

###  <a name="zh-cn_topic_0000001496017745_li1225615565332"></a>**购买华为云服务组件，**
-   购买华为云RabbitMQ，参数如下，注意创建时用户名不能为guest，账号密码需要在步骤4中配置。

<a name="table346313491440"></a>
    <table><thead align="left"><tr id="row7463184911443"><th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.1"><p id="p1546334934410"><a name="p1546334934410"></a><a name="p1546334934410"></a>类型</p>
    </th>
    <th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.2"><p id="p446310491445"><a name="p446310491445"></a><a name="p446310491445"></a>规格</p>
    </th>
    </tr>
    </thead>
    <tbody><tr id="row9463184934411"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p7463349174420"><a name="p7463349174420"></a><a name="p7463349174420"></a>计费模式</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p84631549194418"><a name="p84631549194418"></a><a name="p84631549194418"></a>按需计费</p>
    </td>
    </tr>
    <tr id="row4463144914410"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p19463164915441"><a name="p19463164915441"></a><a name="p19463164915441"></a>版本</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p346494918446"><a name="p346494918446"></a><a name="p346494918446"></a>任意</p>
    </td>
    </tr>
    <tr id="row12781555236"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p9278155513235"><a name="p9278155513235"></a><a name="p9278155513235"></a>VPC</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p2278155511236"><a name="p2278155511236"></a><a name="p2278155511236"></a>与其它服务相同</p>
    </td>
    </tr>
    <tr id="row246444914419"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p1646494912449"><a name="p1646494912449"></a><a name="p1646494912449"></a>实例类型</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p1464349184419"><a name="p1464349184419"></a><a name="p1464349184419"></a>单机</p>
    </td>
    </tr>
    <tr id="row17464349194414"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p94600260459"><a name="p94600260459"></a><a name="p94600260459"></a>代理规格</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p746444934416"><a name="p746444934416"></a><a name="p746444934416"></a>rabbitmq.2u4g.single</p>
    </td>
    </tr>
    </tbody>
    </table>

1. 新增VitualHost为istio-saas-housekeeper。

![](figures/zh-cn_image_0000001513284161.png)

2. 单击用户，为用户添加VitualHost授权。

![](figures/zh-cn_image_0000001513403769.png)

3. 增加队列

<a name="table567819132344"></a>
   <table><thead align="left"><tr id="row1967841316346"><th class="cellrowborder" valign="top" width="100%" id="mcps1.1.2.1.1"><p id="p1667841314344"><a name="p1667841314344"></a><a name="p1667841314344"></a>queues</p>
   </th>
   </tr>
   </thead>
   <tbody><tr id="row126786132341"><td class="cellrowborder" valign="top" width="100%" headers="mcps1.1.2.1.1 "><p id="p5679113113419"><a name="p5679113113419"></a><a name="p5679113113419"></a>istio.message.queue</p>
   </td>
   </tr>
   <tr id="row19679161343412"><td class="cellrowborder" valign="top" width="100%" headers="mcps1.1.2.1.1 "><p id="p967911319349"><a name="p967911319349"></a><a name="p967911319349"></a>istio.order.task</p>
   </td>
   </tr>
   <tr id="row26796137346"><td class="cellrowborder" valign="top" width="100%" headers="mcps1.1.2.1.1 "><p id="p76790137349"><a name="p76790137349"></a><a name="p76790137349"></a>istio.task.order</p>
   </td>
   </tr>
   </tbody>
   </table>

![](figures/zh-cn_image_0000001513993625.png)

1.  增加exchanges名称为amq.topic，点击amq.topic增加queues绑定。

![](figures/zh-cn_image_0000001463084146.png)

<a name="zh-cn_topic_0000001496017745_table2644123615719"></a>
   <table><thead align="left"><tr id="zh-cn_topic_0000001496017745_row14644183625710"><th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.1"><p id="zh-cn_topic_0000001496017745_p041753865710"><a name="zh-cn_topic_0000001496017745_p041753865710"></a><a name="zh-cn_topic_0000001496017745_p041753865710"></a>queues</p>
   </th>
   <th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.2"><p id="zh-cn_topic_0000001496017745_p1641710385577"><a name="zh-cn_topic_0000001496017745_p1641710385577"></a><a name="zh-cn_topic_0000001496017745_p1641710385577"></a>Routing Key</p>
   </th>
   </tr>
   </thead>
   <tbody><tr id="zh-cn_topic_0000001496017745_row1764593611574"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="zh-cn_topic_0000001496017745_p10417103810575"><a name="zh-cn_topic_0000001496017745_p10417103810575"></a><a name="zh-cn_topic_0000001496017745_p10417103810575"></a>istio.message.queue</p>
   </td>
   <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="zh-cn_topic_0000001496017745_p1041743895716"><a name="zh-cn_topic_0000001496017745_p1041743895716"></a><a name="zh-cn_topic_0000001496017745_p1041743895716"></a>istio.message.#</p>
   </td>
   </tr>
   <tr id="zh-cn_topic_0000001496017745_row1164523618575"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="zh-cn_topic_0000001496017745_p174172038135714"><a name="zh-cn_topic_0000001496017745_p174172038135714"></a><a name="zh-cn_topic_0000001496017745_p174172038135714"></a>istio.order.task</p>
   </td>
   <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="zh-cn_topic_0000001496017745_p3417143816577"><a name="zh-cn_topic_0000001496017745_p3417143816577"></a><a name="zh-cn_topic_0000001496017745_p3417143816577"></a>istio.task.order.newOrder</p>
   </td>
   </tr>
   <tr id="zh-cn_topic_0000001496017745_row26451136155718"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="zh-cn_topic_0000001496017745_p7417153813571"><a name="zh-cn_topic_0000001496017745_p7417153813571"></a><a name="zh-cn_topic_0000001496017745_p7417153813571"></a>istio.task.order</p>
   </td>
   <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="zh-cn_topic_0000001496017745_p11417173819572"><a name="zh-cn_topic_0000001496017745_p11417173819572"></a><a name="zh-cn_topic_0000001496017745_p11417173819572"></a>istio.order.task.doTask</p>
   </td>
   </tr>
   </tbody>
   </table>

-   购买RDS$Mysql$服务，账号密码地址在步骤4中配置。

<a name="table64403025517"></a>
    <table><thead align="left"><tr id="row74413020557"><th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.1"><p id="p14415019554"><a name="p14415019554"></a><a name="p14415019554"></a>类型</p>
    </th>
    <th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.2"><p id="p19441120125511"><a name="p19441120125511"></a><a name="p19441120125511"></a>规格</p>
    </th>
    </tr>
    </thead>
    <tbody><tr id="row1944170195513"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p54416055511"><a name="p54416055511"></a><a name="p54416055511"></a>计费模式</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p194411001557"><a name="p194411001557"></a><a name="p194411001557"></a>按需计费</p>
    </td>
    </tr>
    <tr id="row6441402558"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p1344150155515"><a name="p1344150155515"></a><a name="p1344150155515"></a>版本</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p9441150125510"><a name="p9441150125510"></a><a name="p9441150125510"></a>8.0</p>
    </td>
    </tr>
    <tr id="row196571523182415"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p29628242245"><a name="p29628242245"></a><a name="p29628242245"></a>VPC</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p19621624132416"><a name="p19621624132416"></a><a name="p19621624132416"></a>与其它服务相同</p>
    </td>
    </tr>
    <tr id="row14419010553"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p184416013551"><a name="p184416013551"></a><a name="p184416013551"></a>实例类型</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p1544111055513"><a name="p1544111055513"></a><a name="p1544111055513"></a>单机</p>
    </td>
    </tr>
    <tr id="row8242112475610"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p82427241562"><a name="p82427241562"></a><a name="p82427241562"></a>性能规格</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p11242152415562"><a name="p11242152415562"></a><a name="p11242152415562"></a>2vCPUs|4GB</p>
    </td>
    </tr>
    </tbody>
    </table>

1.  创建成功后通过华为云登录数据库，将项目根目录下/db目录下sql文件内容复制到如下图中并执行。

![](img/deploy/executeSql.png)

1.  需要在两个组件的安全组中增加集群的容器网段(CCE控制台集群信息中查看)，否则Mysql与RabbitMq将无法连接集群。

### <a name="li126171154510"></a>进入集群节点拉取项目代码
- 安装git

```
    yum install git
    ```

- 拉取代码

```
    git clone -b master-dev https://gitee.com/HuaweiCloudDeveloper/huaweicloud-istio-k8s-saas-housekeeper.git
    ```

- 创建命名空间housekeeper

```
    kubectl create namespace housekeeper
    ```

- 开启housekeeper命名空间自动注入sidecar，服务部署后会在Pod中自动注入sidecar。

```
    kubectl label namespace housekeeper istio-injection=enabled --overwrite
    ```

- 创建configMap，用于微服务从configMap获取配置信息，首先修改configMap文件中地址。
  - 文件中mysql和rabbitmq地址账号密码修改为之前购买的地址。
  - 文件中k8sConfig为步骤1中kubernetes.json中内容；token获取方式如下。
    ```
    kubectl apply -f    /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-config/saas-housekeeper-k8s-configMap/
    ```

<a name="table1910810612275"></a>
    <table><thead align="left"><tr id="row131085672716"><th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.1"><p id="p141081367279"><a name="p141081367279"></a><a name="p141081367279"></a>key键</p>
    </th>
    <th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.2"><p id="p5108136172718"><a name="p5108136172718"></a><a name="p5108136172718"></a>value值</p>
    </th>
    </tr>
    </thead>
    <tbody><tr id="row91083642711"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p101081569275"><a name="p101081569275"></a><a name="p101081569275"></a>k8sConfig</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p12108167271"><a name="p12108167271"></a><a name="p12108167271"></a>步骤1中下的kubernetes.json中的内容</p>
    </td>
    </tr>
    <tr id="row14108464273"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p11086612719"><a name="p11086612719"></a><a name="p11086612719"></a>token</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p1310820632712"><a name="p1310820632712"></a><a name="p1310820632712"></a>获取token方法如下</p>
    </td>
    </tr>
    </tbody>
    </table>

进入集群节点，执行如下命令获取token

```
    kubectl config view -o jsonpath='{"Cluster name\tServer\n"}{range .clusters[*]}{.name}{"\t"}{.cluster.server}{"\n"}{end}'
    ```

```
    export CLUSTER_NAME="kubernetes"
    ```

```
    APISERVER=$(kubectl config view -o jsonpath="{.clusters[?(@.name==\"$CLUSTER_NAME\")].cluster.server}")
    ```

```
    TOKEN=$(kubectl get secrets -o jsonpath="{.items[?(@.metadata.annotations['kubernetes\.io/service-account\.name']=='default')].data.token}"|base64 -d)
    ```

```
    echo ${TOKEN}
    ```

- 手动制作镜像参考[步骤5](#li1928153912317)；直接使用现有镜像部署，参考[步骤6](#li20283153417264)。

###  <a name="li1928153912317"></a>**手动制作镜像部署（使用现有镜像部署可跳过，直接查看步骤6）**

进入集群节点，制作镜像并提交到华为云SWR

-   安装docker

```
 yum install docker
```

-   安装jdk8

```
yum install java-1.8.0-openjdk-devel.x86_64
```

- 安装[maven](https://maven.apache.org/docs/3.8.4/release-notes.html)下载maven复制到usr/local目录。配置maven环境变量

```
vi /etc/profile
```

最后插入以下内容

```
export MAVEN_HOME=/usr/local/apache-maven-3.8.4
export PATH=$PATH:$MAVEN_HOME/bin
```

保存,执行生效命令

```
source /etc/profile
```

修改maven镜像下载地址加速

```
vim /usr/local/apache-maven-3.8.4/conf/settings.xml
```

在mirrors中增加如下配置

```
<mirrors>
    <mirror> 
      <id>alimaven</id> 
      <name>aliyun maven</name>   
      <url>http://maven.aliyun.com/nexus/content/groups/public/</url> 
      <mirrorOf>central</mirrorOf> 
   </mirror>
</mirrors>
```

-   项目模块打包，制作镜像以及提交。

```
cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper
```

-   模块打包

```
mvn clean install -DskipTests
```

-   前端镜像制作，需要先查看[步骤6](#zh-cn_topic_0000001496017745_li13887555142619)，完成域名配置

```
    cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper/
    ```

-   提交镜像需要先登录SWR。登录华为云SWR，如下图将命令复制到集群节点中执行。

![](img/deploy/loginSWR.png)

-   注意，制作镜像需要确认镜像地址区域以及用户名，生成镜像格式如下。

```
docker tag [{镜像名称}:{版本名称}] {区域地址}/{组织名称}/{镜像名称}:{版本名称}
docker push {区域地址}/{组织名称}/{镜像名称}:{版本名称}
```

- 前端镜像制作

```
    docker build -t istio-frontend .
    docker tag istio-frontend:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-frontend:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-frontend:latest
    ```

- 后端镜像制作，可将下列命令中的swr.cn-south-1.myhuaweicloud.com/tansj替换为你的区域地址加上用户名。然后再执行

```
    cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-service-publish-service
    docker build -t istio-publish-service
    docker tag istio-publish-service:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-publish-service:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-publish-service:latest
    cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-tenantinfo-service
    docker build -t istio-tenantinfo-service
    docker tag istio-tenantinfo-service:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-tenantinfo-service:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-tenantinfo-service:latest
    cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-userinfo-service
    docker build -t istio-userinfo-service
    docker tag istio-userinfo-service:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-userinfo-service:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-userinfo-service:latest
    cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-message-service
    docker build -t istio-message-service
    docker tag istio-message-service:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-message-service:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-message-service:latest
    cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-order-service
    docker build -t istio-order-service
    docker tag istio-order-service:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-order-service:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-order-service:latest
    cd /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-task-service
    docker build -t istio-task-service
    docker tag istio-task-service:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-task-service:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-task-service:latest
    ```

- istio-event-tracking模块采用C\#语言实现，需要安装.net SDK。

下载[.net SDK6.0](https://dotnet.microsoft.com/zh-cn/download/dotnet/6.0)并安装，然后打包制作镜像。

```
    cd  /usr/local/huaweicloud-istio-k8s-saas-housekeeper
    ```

```
    dotnet restore "EventTraceLogger.csproj"
    dotnet publish --no-restore "EventTraceLogger.csproj" -c Release -o "app/publish"
        
    docker build -t istio-event-tracking:latest .
    docker tag istio-event-tracking:latest swr.cn-south-1.myhuaweicloud.com/tansj/istio-event-tracking:latest
    docker push swr.cn-south-1.myhuaweicloud.com/tansj/istio-event-tracking:latest
    ```

### <a name="li20283153417264"></a>**使用现有镜像部署**
-   配置Istio相关配置

```
    kubectl apply -f    /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-config/saas-housekeeper-istio-config/
    ```

-   启动所有服务

```
    kubectl apply -f    /usr/local/huaweicloud-istio-k8s-saas-housekeeper/saas-housekeeper-config/saas-housekeeper-istio-deploy/
    ```

检查istio-event-tracking工作负载是否增加以下环境变量。作用是将启动的默认端口80映射到8600

<a name="table29194512276"></a>
    <table><thead align="left"><tr id="row991920592711"><th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.1"><p id="p177976262617"><a name="p177976262617"></a><a name="p177976262617"></a>变量名称</p>
    </th>
    <th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.2"><p id="p137971820266"><a name="p137971820266"></a><a name="p137971820266"></a>变量值</p>
    </th>
    </tr>
    </thead>
    <tbody><tr id="row992075162717"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p137972202617"><a name="p137972202617"></a><a name="p137972202617"></a>ASPNETCORE_URLS</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p157970219268"><a name="p157970219268"></a><a name="p157970219268"></a><strong id="b18998411162610"><a name="b18998411162610"></a><a name="b18998411162610"></a><a href="http://+:8600/" target="_blank" rel="noopener noreferrer">http://+:8600</a></strong></p>
    </td>
    </tr>
    </tbody>
    </table>

###  <a name="zh-cn_topic_0000001496017745_li13887555142619"></a>**配置项目访问地址**
- 负载均衡器与Istio网关绑定。
    -   购买华为云负载均衡器ELB服务 $需要弹性公网IP$
    -   将ELB的IP地址绑定到Istio入口网关。进入CCE集群节点，编辑网关，增加下图中的配置。

```
        kubectl edit svc istio-ingressgateway -n istio-system
        ```

![](img/deploy/editIngressGateway.png)  ![](img/deploy/editIngressGateway2.png)

- 域名绑定ELB负载均衡器，域名要求是5级域名，格式为：【XX.XX.XX.XX.】

华为云搜索DNS \> 记录集 \> 选择已存在的任意域名，要求域名的格式为【XX.XX】。\> 添加两个记录集 \> 主机记录值任意。以housekeeper例，添加的两个值为【housekeeper】与【\*.housekeeper】；值为 ELB 公网IP地址。

为工作负载istio-frontend，增加环境变量域名配置。

<a name="table253281323010"></a>
    <table><thead align="left"><tr id="row5532101333015"><th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.1"><p id="p1353211323017"><a name="p1353211323017"></a><a name="p1353211323017"></a>key</p>
    </th>
    <th class="cellrowborder" valign="top" width="50%" id="mcps1.1.3.1.2"><p id="p11532151319308"><a name="p11532151319308"></a><a name="p11532151319308"></a>value</p>
    </th>
    </tr>
    </thead>
    <tbody><tr id="row165321313103019"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.1 "><p id="p953216135305"><a name="p953216135305"></a><a name="p953216135305"></a>SERVER_HOST</p>
    </td>
    <td class="cellrowborder" valign="top" width="50%" headers="mcps1.1.3.1.2 "><p id="p153231363011"><a name="p153231363011"></a><a name="p153231363011"></a>housekeeper.XX.XX</p>
    </td>
    </tr>
    </tbody>
    </table>

![](img/deploy/nginxAddress.png)

###  <a name="li55641323174115"></a>**测试访问以及访问Kiali插件监控**

以上面填写的域名为准，访问地址如下：

| 名称  | 地址                                                                                            | 账号 |
| ------------ |-----------------------------------------------------------------------------------------------| ------------ |
| 租户注册      | [http://租户名称.housekeeper.XX.XX/tenant/#/register](http://housekeeper.XX.XX/tenant/#/register) | 无需账号 |
|超级管理中心   | [http://housekeeper.XX.XX/super-admin/#/login](http://housekeeper.XX.XX/super-admin/#/login)  | 账号:  Admin </br> 密码: AF5<dBNy |
| 租户管理中心  | [http://租户名称.housekeeper.XX.XX/tenant/#/login](#)                                             | 账号:  tenant </br> 密码:   lhKk101@mm.  |
| 用户管理中心  | [http://租户名称.housekeeper.XX.XX/customer/#/login](#)                                           | 注册获得 |
| 雇员管理中心  | [http://租户名称.housekeeper.XX.XX/worker/#/login](#)                                             | 注册获得 |

![](img/deploy/sample.png)
- 上图中地址说明：
   - 1注册时自己填写的租户标识。
   - 2添加记录集时填写的名称。
   - 3添加记录集选择的域名。

访问[Kiali](http://kiali.io)插件页面

![](img/deploy/kialiHome.png)

Graph：可以查看运行的负载，以及请求调用链路。

Applications:  是由用户应用于对象的应用程序标签定义的工作负载的逻辑分组。在Istio中，它由标签应用程序定义。

Workloads:  工作负载分组，工作负载具有名称、名称空间和唯一ID。

Services:   一种抽象，它定义了一组逻辑Pod，以及一个访问它们的策略。服务由标签确定。

Istio Config:  istio配置可以是以下任何类型：Gateway，VirtualService，DestinationRule，ServiceEntry，Rule，QuotaSpec 或 QuotaSpecBinding。

HuaweiCloudDeveloper/huaweicloud-istio-k8s-saas-housekeeper

简介

发行版

贡献者

近期动态

HuaweiCloudDeveloper/huaweicloud-istio-k8s-saas-housekeeper .gitee-modal { width: 500px !important; }

简介

发行版

贡献者

近期动态

搜索帮助

HuaweiCloudDeveloper/huaweicloud-istio-k8s-saas-housekeeper