3장.


3.1.

주의

3.1.1.

참고

3.1.2.

3.1.2.1.

  • $ oc adm must-gather \
      --image=registry.redhat.io/container-native-virtualization/cnv-must-gather-rhel9:v4.17.7
    Copy to Clipboard Toggle word wrap
    • $ oc adm must-gather -- /usr/bin/gather_audit_logs
      Copy to Clipboard Toggle word wrap
      참고

NAMESPACE                      NAME                 READY   STATUS      RESTARTS      AGE
...
openshift-must-gather-5drcj    must-gather-bklx4    2/2     Running     0             72s
openshift-must-gather-5drcj    must-gather-s8sdh    2/2     Running     0             72s
...
Copy to Clipboard Toggle word wrap

$ oc adm must-gather --run-namespace <namespace> \
  --image=registry.redhat.io/container-native-virtualization/cnv-must-gather-rhel9:v4.17.7
Copy to Clipboard Toggle word wrap

3.1.2.2.

3.1.2.3.

  1. $ oc adm must-gather --image=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel8:2.6
    Copy to Clipboard Toggle word wrap
  2. $ oc adm must-gather --image=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel8:2.6 gather <namespace>
    Copy to Clipboard Toggle word wrap

3.1.3.

참고

3.1.3.1.

3.1.3.2.

3.1.4.

3.1.4.1.

3.1.4.1.1.
Expand
  

3.1.4.2.

3.1.4.2.1.
Expand
  

3.1.4.3.

3.1.4.3.1.
Expand
  

3.1.4.4.

3.1.4.4.1.

3.1.4.4.2.

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin
  namespace: foo
spec:
  action: DENY
  rules:
  - from:
    - source:
        namespaces: ["dev"]
    to:
    - operation:
        hosts: [“httpbin.com”,"httpbin.com:*"]
Copy to Clipboard Toggle word wrap

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin
  namespace: default
spec:
  action: DENY
  rules:
  - to:
    - operation:
        hosts: ["httpbin.example.com:*"]
Copy to Clipboard Toggle word wrap

3.1.4.5.

3.1.4.6.

3.1.4.7.

3.1.4.8.

중요

3.1.4.8.1.

참고

3.1.4.8.2.

Expand
표 3.1.
    

주의

3.1.4.8.3.

Expand
표 3.2.
  

3.1.4.8.4.

spec:
  global:
    pathNormalization: <option>
Copy to Clipboard Toggle word wrap

3.1.4.9.

3.1.4.10.

3.1.4.11.

3.1.4.12.

3.1.4.13.

3.1.4.14.

3.1.4.15.

3.1.4.16.

3.1.4.17.

3.1.4.18.

참고

3.1.4.18.1.

중요

  1.   {
        "runtime": {
          "symlink_root": "/var/lib/istio/envoy/runtime"
        }
      }
    Copy to Clipboard Toggle word wrap
  2. $  oc create secret generic -n <SMCPnamespace> gateway-bootstrap --from-file=bootstrap-override.json
    Copy to Clipboard Toggle word wrap
  3. apiVersion: maistra.io/v1
    kind: ServiceMeshControlPlane
    spec:
      istio:
        gateways:
          istio-ingressgateway:
            env:
              ISTIO_BOOTSTRAP_OVERRIDE: /var/lib/istio/envoy/custom-bootstrap/bootstrap-override.json
            secretVolumes:
            - mountPath: /var/lib/istio/envoy/custom-bootstrap
              name: custom-bootstrap
              secretName: gateway-bootstrap
    Copy to Clipboard Toggle word wrap

  4. $  oc create secret generic -n <SMCPnamespace> gateway-settings --from-literal=overload.global_downstream_max_connections=10000
    Copy to Clipboard Toggle word wrap

apiVersion: maistra.io/v1
kind: ServiceMeshControlPlane
spec:
  template: default
#Change the version to "v1.0" if you are on the 1.0 stream.
  version: v1.1
  istio:
    gateways:
      istio-ingressgateway:
        env:
          ISTIO_BOOTSTRAP_OVERRIDE: /var/lib/istio/envoy/custom-bootstrap/bootstrap-override.json
        secretVolumes:
        - mountPath: /var/lib/istio/envoy/custom-bootstrap
          name: custom-bootstrap
          secretName: gateway-bootstrap
        # below is the new secret mount
        - mountPath: /var/lib/istio/envoy/runtime
          name: gateway-settings
          secretName: gateway-settings
Copy to Clipboard Toggle word wrap

3.1.4.18.2.

  1. $ oc get jaeger -n istio-system
    Copy to Clipboard Toggle word wrap

    NAME     AGE
    jaeger   3d21h
    Copy to Clipboard Toggle word wrap
  2. $ oc get jaeger jaeger -oyaml -n istio-system > /tmp/jaeger-cr.yaml
    Copy to Clipboard Toggle word wrap
  3. $ oc delete jaeger jaeger -n istio-system
    Copy to Clipboard Toggle word wrap
  4. $ oc create -f /tmp/jaeger-cr.yaml -n istio-system
    Copy to Clipboard Toggle word wrap
  5. $ rm /tmp/jaeger-cr.yaml
    Copy to Clipboard Toggle word wrap

  1. $ oc delete -f <jaeger-cr-file>
    Copy to Clipboard Toggle word wrap

    $ oc delete -f jaeger-prod-elasticsearch.yaml
    Copy to Clipboard Toggle word wrap
  2. $ oc create -f <jaeger-cr-file>
    Copy to Clipboard Toggle word wrap
  3. $ oc get pods -n jaeger-system -w
    Copy to Clipboard Toggle word wrap

3.1.4.19.

3.1.4.20.

3.1.4.21.

3.1.4.22.

3.1.4.22.1.

spec:
  version: v1.1
  ...
Copy to Clipboard Toggle word wrap

참고

3.1.5.

3.1.5.1.

3.1.6.

3.1.6.1.

3.1.6.2.

참고

3.1.7.

3.1.7.1.

3.1.7.2.

맨 위로 이동
Red Hat logoGithubredditYoutubeTwitter

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

Red Hat을 사용하는 고객은 신뢰할 수 있는 콘텐츠가 포함된 제품과 서비스를 통해 혁신하고 목표를 달성할 수 있습니다. 최신 업데이트를 확인하세요.

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat은 코드, 문서, 웹 속성에서 문제가 있는 언어를 교체하기 위해 최선을 다하고 있습니다. 자세한 내용은 다음을 참조하세요.Red Hat 블로그.

Red Hat 소개

Red Hat은 기업이 핵심 데이터 센터에서 네트워크 에지에 이르기까지 플랫폼과 환경 전반에서 더 쉽게 작업할 수 있도록 강화된 솔루션을 제공합니다.

Theme

© 2025 Red Hat