mirror of https://github.com/istio/istio.io.git
Fix multi network VM doc (#7894)
This commit is contained in:
parent
fa94077d95
commit
02df6b9fe9
|
@ -39,14 +39,31 @@ following commands on a machine with cluster admin privileges:
|
||||||
|
|
||||||
1. Create a Kubernetes secret for your generated CA certificates using a command similar to the following. See [Certificate Authority (CA) certificates](/docs/tasks/security/cert-management/plugin-ca-cert/) for more details.
|
1. Create a Kubernetes secret for your generated CA certificates using a command similar to the following. See [Certificate Authority (CA) certificates](/docs/tasks/security/cert-management/plugin-ca-cert/) for more details.
|
||||||
|
|
||||||
1. Follow the same steps as [setting up single-network](/docs/examples/virtual-machines/single-network) configuration for the initial setup of the
|
{{< warning >}}
|
||||||
cluster and certificates with the change of how you deploy Istio control plane:
|
The root and intermediate certificate from the samples directory are widely
|
||||||
|
distributed and known. Do **NOT** use these certificates in production as
|
||||||
|
your clusters would then be open to security vulnerabilities and compromise.
|
||||||
|
{{< /warning >}}
|
||||||
|
|
||||||
|
{{< text bash >}}
|
||||||
|
$ kubectl create namespace istio-system
|
||||||
|
$ kubectl create secret generic cacerts -n istio-system \
|
||||||
|
--from-file=@samples/certs/ca-cert.pem@ \
|
||||||
|
--from-file=@samples/certs/ca-key.pem@ \
|
||||||
|
--from-file=@samples/certs/root-cert.pem@ \
|
||||||
|
--from-file=@samples/certs/cert-chain.pem@
|
||||||
|
{{< /text >}}
|
||||||
|
|
||||||
|
1. For a simple setup, deploy Istio control plane into the cluster
|
||||||
|
|
||||||
{{< text bash >}}
|
{{< text bash >}}
|
||||||
$ istioctl install \
|
$ istioctl install \
|
||||||
-f manifests/examples/vm/values-istio-meshexpansion.yaml
|
-f manifests/examples/vm/values-istio-meshexpansion.yaml
|
||||||
{{< /text >}}
|
{{< /text >}}
|
||||||
|
|
||||||
|
For further details and customization options, refer to the
|
||||||
|
[installation instructions](/docs/setup/install/istioctl/).
|
||||||
|
|
||||||
### Setting up the VM
|
### Setting up the VM
|
||||||
|
|
||||||
Next, run the following commands on each machine that you want to add to the mesh:
|
Next, run the following commands on each machine that you want to add to the mesh:
|
||||||
|
|
|
@ -70,7 +70,8 @@ following commands on a machine with cluster admin privileges:
|
||||||
1. For a simple setup, deploy Istio control plane into the cluster
|
1. For a simple setup, deploy Istio control plane into the cluster
|
||||||
|
|
||||||
{{< text bash >}}
|
{{< text bash >}}
|
||||||
$ istioctl install
|
$ istioctl install \
|
||||||
|
-f manifests/examples/vm/values-istio-meshexpansion.yaml
|
||||||
{{< /text >}}
|
{{< /text >}}
|
||||||
|
|
||||||
For further details and customization options, refer to the
|
For further details and customization options, refer to the
|
||||||
|
|
Loading…
Reference in New Issue