按照官网的步骤已经装好了k8s集群，一个主节点，两个node节点

然后在网络好的情况下安装了istio 

[root@istio-master istio-1.6.8]# istioctl version
client version: 1.6.8
control plane version: 1.6.8
data plane version: 1.6.8 (3 proxies)

　　

命名空间已经创建完毕

[root@istio-master istio-1.6.8]# kubectl get ns
NAME              STATUS   AGE
default           Active   46h
istio-system      Active   24h
kube-node-lease   Active   46h
kube-public       Active   46h
kube-system       Active   46h

 

istio的组件也已经安装好

[root@istio-master istio-1.6.8]# kubectl get po -n istio-system
NAME                                    READY   STATUS    RESTARTS   AGE
grafana-b54bb57b9-g5l22                 1/1     Running   3          18h
istio-egressgateway-7447bd847b-25f9q    1/1     Running   3          18h
istio-ingressgateway-59c788fd4f-b584h   1/1     Running   3          18h
istio-tracing-9dd6c4f7c-l7qg5           1/1     Running   3          18h
istiod-54d84dc79c-46lnj                 1/1     Running   3          18h
kiali-d45468dc4-2nlbm                   1/1     Running   3          18h
prometheus-79fb649b4d-vxlvp             2/2     Running   6          18h

按照步骤下载demo

istioctl install --set profile=demo -y

对默认的default 命名空间允许自动注入

kubectl label namespace default istio-injection=enabled

安装bookinfo应用

kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml

查看istio-system下面的服务

[root@istio-master istio-1.6.8]# kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
details ClusterIP 10.98.20.95 <none> 9080/TCP 12h
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 47h
productpage ClusterIP 10.101.178.151 <none> 9080/TCP 12h
ratings ClusterIP 10.111.150.158 <none> 9080/TCP 12h
reviews ClusterIP 10.103.216.244 <none> 9080/TCP 12h

 

也没有问题

但是默认命名空间下没有创建pod

[root@istio-master istio-1.6.8]# kubectl get po 
No resources found in default namespace.

肯定是自动注入sidecar失败了，甚至连pod 都创建失败了，探索原因

 

查看bookinfo 创建应用的pod报错原因

[root@istio-master istio-1.6.8]# kubectl describe deployment productpage

 

已经找到对应的pod 

 

 

 

执行语句查看pod报错原因

[root@istio-master istio-1.6.8]# kubectl describe replicaset productpage-v1-6987489c74

 

 

  Warning  FailedCreate  124m (x3 over 12h)   replicaset-controller  Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post https://istiod.istio-system.svc:443/inject?timeout=30s: context deadline exceeded (Client.Timeout exceeded while awaiting headers)
  Warning  FailedCreate  107m (x15 over 12h)  replicaset-controller  Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post https://istiod.istio-system.svc:443/inject?timeout=30s: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
  Warning  FailedCreate  72m (x9 over 12h)    replicaset-controller  Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post https://istiod.istio-system.svc:443/inject?timeout=30s: context deadline exceeded
  Warning  FailedCreate  50m (x2 over 54m)    replicaset-controller  Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post https://istiod.istio-system.svc:443/inject?timeout=30s: context deadline exceeded (Client.Timeout exceeded while awaiting headers)
  Warning  FailedCreate  33m (x10 over 53m)   replicaset-controller  Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post https://istiod.istio-system.svc:443/inject?timeout=30s: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
  Warning  FailedCreate  5m1s (x8 over 53m)   replicaset-controller  Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post https://istiod.istio-system.svc:443/inject?timeout=30s: context deadline exceeded

 

看报错信息提示

failed calling webhook "sidecar-injector.istio.io"
这个组件连接失败

几乎找遍了istio官网没找到答案， 也看到网络上好几个小伙伴出现了这个问题也没有解决。

上官网，Istio / Sidecar Injection Problems没有一个描述是符合的。github issue也没有提到要安装metrics-server。

就去安装metics-server

[root@istio-master istio-1.6.8]# kubectl top pods 
Error from server (NotFound): the server could not find the requested resource (get services http:heapster:)

上面信息证明没有安装metics-server

按照 下面两个博客进行安装，

https://www.cnblogs.com/lfl17718347843/p/14283796.html

https://blog.51cto.com/u_14783669/2521159

 

但是k8s.gcr.io/metrics-server/metrics-server  这个镜像不可用，又重新在网上新找一个 v0.4.1 版本的镜像 部署到node2节点 这才成功

 

再次走上面的逻辑进行sidecar进行自动注入

首先删除之前的pod

samples/bookinfo/platform/kube/cleanup.sh

　

清理过后重新走

kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml

　　

结果完美解决自动注入问题

[root@istio-master istio-1.6.8]# kubectl get pods
NAME                              READY   STATUS    RESTARTS   AGE
details-v1-558b8b4b76-2dh4d       2/2     Running   0          2m41s
productpage-v1-6987489c74-9nnbc   2/2     Running   0          2m40s
ratings-v1-7dc98c7588-vrszj       2/2     Running   0          2m40s
reviews-v1-7f99cc4496-cd7w7       2/2     Running   0          2m40s
reviews-v2-7d79d5bd5d-xzl4k       2/2     Running   0          2m41s
reviews-v3-7dbcdcbc56-8ndvh       2/2     Running   0          2m41s