前边有使用minikube运行kuma，以下是在centos 上安装使用
环境准备
下载软件包
wget https://kong.bintray.com/kuma/kuma-0.1.1-centos.tar.gz
配置环境变量
tar xvzf kuma-0.1.1-centos.tar.gz
export PATH=$PATH:$PWD/bin
运行
启动控制面板
kuma-cp run
效果
2019-09-11T13:21:20.138+0800 INFO Skipping reading config from file
2019-09-11T13:21:20.232+0800 INFO bootstrap.auto-configure auto-generated TLS certificate for SDS server {"crtFile": "/tmp/782349258.crt", "keyFile": "/tmp/072995489.key"}
2019-09-11T13:21:20.234+0800 INFO kuma-cp.run starting Control Plane
2019-09-11T13:21:20.235+0800 INFO api-server starting {"port": ":5681"}
2019-09-11T13:21:20.235+0800 INFO Creating default mesh from the settings{"mesh": {"mtls":{"ca":{"Type":{"Builtin":{}}}},"tracing":{"Type":null},"logging":{"accessLogs":{}}}}
2019-09-11T13:21:20.236+0800 INFO sds-server.grpc starting {"port": 5677, "tls": true}
2019-09-11T13:21:20.236+0800 INFO xds-server.grpc starting {"port": 5678}
2019-09-11T13:21:20.236+0800 INFO xds-server.diagnostics starting {"port": 5680}
2019-09-11T13:21:20.236+0800 INFO bootstrap-server starting {"port": 5682}
启动数据面板
- 暴露测试服务
kuma-tcp-echo -port 9000
效果
kuma-tcp-echo -port 9000
2019/09/11 13:23:55 Kuma TCP Echo - Listening to connections on port 9000
访问：
curl http://localhost:9000
- 应用网络配置
echo "type: Dataplane
mesh: default
name: dp-echo-1
networking:
inbound:
- interface: 127.0.0.1:10000:9000
tags:
service: echo" | kumactl apply -f -
- 启动数据面板
KUMA_CONTROL_PLANE_BOOTSTRAP_SERVER_URL=http://127.0.0.1:5682 \
KUMA_DATAPLANE_MESH=default \
KUMA_DATAPLANE_NAME=dp-echo-1 \
kuma-dp run
数据面板日志：
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:242] initializing epoch 0 (hot restart version=11.104)
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:244] statically linked extensions:
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:246] access_loggers: envoy.file_access_log,envoy.http_grpc_access_log,envoy.tcp_grpc_access_log
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:249] filters.http: envoy.buffer,envoy.cors,envoy.csrf,envoy.ext_authz,envoy.fault,envoy.filters.http.dynamic_forward_proxy,envoy.filters.http.grpc_http1_reverse_bridge,envoy.filters.http.header_to_metadata,envoy.filters.http.jwt_authn,envoy.filters.http.original_src,envoy.filters.http.rbac,envoy.filters.http.tap,envoy.grpc_http1_bridge,envoy.grpc_json_transcoder,envoy.grpc_web,envoy.gzip,envoy.health_check,envoy.http_dynamo_filter,envoy.ip_tagging,envoy.lua,envoy.rate_limit,envoy.router,envoy.squash
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:252] filters.listener: envoy.listener.http_inspector,envoy.listener.original_dst,envoy.listener.original_src,envoy.listener.proxy_protocol,envoy.listener.tls_inspector
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:255] filters.network: envoy.client_ssl_auth,envoy.echo,envoy.ext_authz,envoy.filters.network.dubbo_proxy,envoy.filters.network.mysql_proxy,envoy.filters.network.rbac,envoy.filters.network.sni_cluster,envoy.filters.network.thrift_proxy,envoy.filters.network.zookeeper_proxy,envoy.http_connection_manager,envoy.mongo_proxy,envoy.ratelimit,envoy.redis_proxy,envoy.tcp_proxy
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:257] stat_sinks: envoy.dog_statsd,envoy.metrics_service,envoy.stat_sinks.hystrix,envoy.statsd
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:259] tracers: envoy.dynamic.ot,envoy.lightstep,envoy.tracers.datadog,envoy.tracers.opencensus,envoy.zipkin
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:262] transport_sockets.downstream: envoy.transport_sockets.alts,envoy.transport_sockets.tap,raw_buffer,tls
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:265] transport_sockets.upstream: envoy.transport_sockets.alts,envoy.transport_sockets.tap,raw_buffer,tls
[2019-09-11 13:28:36.652][14579][info][main] [external/envoy/source/server/server.cc:271] buffer implementation: new
[2019-09-11 13:28:36.656][14579][warning][main] [external/envoy/source/server/server.cc:337] No admin address given, so no admin HTTP server started.
[2019-09-11 13:28:36.656][14579][info][main] [external/envoy/source/server/server.cc:445] runtime: layers:
- name: base
static_layer:
{}
- name: admin
admin_layer:
{}
[2019-09-11 13:28:36.656][14579][info][config] [external/envoy/source/server/configuration_impl.cc:62] loading 0 static secret(s)
[2019-09-11 13:28:36.656][14579][info][config] [external/envoy/source/server/configuration_impl.cc:68] loading 1 cluster(s)
[2019-09-11 13:28:36.657][14579][info][upstream] [external/envoy/source/common/upstream/cluster_manager_impl.cc:157] cm init: initializing cds
[2019-09-11 13:28:36.657][14579][info][config] [external/envoy/source/server/configuration_impl.cc:72] loading 0 listener(s)
[2019-09-11 13:28:36.657][14579][info][config] [external/envoy/source/server/configuration_impl.cc:97] loading tracing configuration
[2019-09-11 13:28:36.657][14579][info][config] [external/envoy/source/server/configuration_impl.cc:117] loading stats sink configuration
[2019-09-11 13:28:36.657][14579][info][main] [external/envoy/source/server/server.cc:530] starting main dispatch loop
[2019-09-11 13:28:37.661][14579][info][upstream] [external/envoy/source/common/upstream/cds_api_impl.cc:63] cds: add 1 cluster(s), remove 1 cluster(s)
[2019-09-11 13:28:37.662][14579][info][upstream] [external/envoy/source/common/upstream/cluster_manager_impl.cc:161] cm init: all clusters initialized
[2019-09-11 13:28:37.662][14579][info][main] [external/envoy/source/server/server.cc:513] all clusters initialized. initializing init manager
[2019-09-11 13:28:37.663][14579][info][upstream] [external/envoy/source/server/lds_api.cc:59] lds: add/update listener 'inbound:127.0.0.1:10000'
[2019-09-11 13:28:37.663][14579][info][config] [external/envoy/source/server/listener_manager_impl.cc:789] all dependencies initialized. starting workers
控制面板日志：
2019-09-11T13:28:36.630+0800 INFO bootstrap-server Generating bootstrap config {"params": {"Id":"default.dp-echo-1.default","Service":"echo","AdminPort":0,"XdsHost":"127.0.0.1","XdsPort":5678}}
- 通过sidecar 访问服务
curl http://127.0.0.1:10000
效果
GET / HTTP/1.1
User-Agent: curl/7.29.0
Host: 127.0.0.1:10000
Accept: */*
- 应用策略
以下是应用tls 的配置
echo "type: Mesh
name: default
mtls:
enabled: true
ca:
builtin: {}" | kumactl apply -f -
配置kuma 的配置管理以及查看服务信息
- 添加管理服务地址
kumactl config control-planes add --name=dalong --address=http://127.0.0.1:5681
效果
kumactl config control-planes list
ACTIVE NAME ADDRESS
local http://localhost:5681
* dalong http://127.0.0.1:5681
- 查看mesh
kumactl get meshes
NAME mTLS DP ACCESS LOGS
default on off
- 查看数据面板
kumactl get dataplanes
MESH NAME TAGS
default dp-echo-1 service=echo